Great introduction on Pluralsight to security issues you face when deploying an ASP.NET MVC 3 application.
Security and ASP.NET MVC 3 (Pluralsight)
ASP.NET Security (microsoft)
"With easier I think Scott (Hanselman) means not impossible", Scott Allen in regards to IIS Express ssl configuration.