Anyone on WSC have any experience authoring a secure web site?

In the discussion of where to go next in the Secure Web Authoring Best 
Practices draft: 
http://www.w3.org/2006/WSC/drafts/wsc-content/ 

We noted that, at least at that meeting, there were not a lot of 
participants with actual experience authoring secure web sites. 
http://www.w3.org/2008/07/09-wsc-minutes.html#item04

Do any of you, WSC WG participants, have experience in authoring secure 
web sites? We'd like to check in on best practices, or on common mistakes. 


          Mez