Resources to learn about security
I'd like to get a good understanding of modern issues in web security and get insight into what it takes to keep your sites and services secure. I'm thinking of concepts like SSL, certificates, threat modeling, authorization/authentication and many many others. I'd also like to understand it both from the point of view of the person implementing the software (I'm a software engineer myself) and the person maintaining it after deployment.
I will most likely not need to go extremely deep technically into the individual issues, but breadth is certainly important as far as anything on the web is concerned.
I know that every area of software has its core texts and resources, and I was hoping that you security professionals would be generous enough to share your domain specific resources with me so I can ramp up and gain a good understanding of the field!