Building a Best Practices Analysis Tool for Asp.Net deployment

Hello all,

I am gathering Rules/Best Practices recommended when developing ASP.NET applications and services. The intention is that we will ship a tool (Power Toy) that performs the analysis on your web sites that you could also extend to include new rules. Whether gained through personal experience or learned formally, I would love to hear your suggestions for default rules.

Context

The context to which I’m speaking of is with the .config files (machine.config and web.config) associated with ASP.NET projects. i.e what settings should and should not be made in said files.

Examples

EnableSessionState = false. Set in web.config for all pages that don’t utilize session data. Enable only when necessary.

AutoEventWireup = false

 

Suggestions in all areas, not limited to the following, are welcome.

  • Performance
  • Security
  • Presentation

Thanks

-Ifeanyi Okpareke (After Market Solutions Team)