Have any security sites developed a list of security recommendations or best practices for Sun One or Sun Java Web Server? I've seen general web server recommendations, and specific recommendations for Microsoft IIS, but never anything specific for Sun.