ASP.NET Vulnerability: Where's Exactly?
Unless you live disconnected and in a dark cave with no wireless network nearby (ain't you participating to a reality show?) you SHOULD know by now of the serious vulnerability issue (read, security-related bug) that affects ASP.NET. I've counted three different alert messages from MS--looks like they know all of my aliases :-)
Only here, though, I've found a readable and understandable description of what happens and where. Canonicalization sounds weird to me and is not a control or a config section. For a serious call to action, read the short note from Keith Brown. Thanks, Keith!