I know your pain -- things like this get long fast, and it's hard to include everything all at once without going on forever. I would definitely appreciate implementing some background off of each item!
Another thing that might help is knowing about services or open source solutions that can bundle a lot of the checklist together. Heroku might be a paid one, for example, but there might be things like ansible scripts out there that do a lot of this from security professionals, I'd love to know how to be able to package a lot of these checklist items together more easier.
Re:Web Developer Security Checklist
by aeronautic on Tuesday May 16, 2017 @12:04PM
(#14350641)
Coding is easy, writing is just darn hard!!
Thanks for the ideas. I'll check those out.
The purpose of the checklist was to get people to think. It is really hard to do much more without going very long.
A number of people have suggested that I link implementation background off each item. I think that can work and layer the info as well.