Re: Security in IIS to where ???
From: x y (levinson_k@excite.com)
Date: 01/14/03
- Next message: Daniel Weatherly: "Re: SSL Wildcard certificate on Win2K"
- Previous message: Keith W. McCammon: "Re: SSL Wildcard certificate on Win2K"
- In reply to: A. J.: "Security in IIS to where ???"
- Next in thread: Keith W. McCammon: "Re: Security in IIS to where ???"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "x y" <levinson_k@excite.com> Date: Tue, 14 Jan 2003 12:48:20 -0500
IIS security is not a nightmare. IIS security is easy to achieve, arguably
easier to achieve than Apache on Windows or Linux. There's even a free tool
that automates it all for you.
Neither IIS nor Apache nor Linux nor Windows is secure in the default
install. Most machines of any OS version are compromised because something
stupid was forgotten by the administrator.
.NET / Windows 2003 server is supposed to be pretty secure and much more
secure in the default install. I could be wrong, but I don't think there is
any Linux or Apache distribution that is secure in the default install yet
[unless maybe you take OpenBSD and then enable / install Apache on it].
You probably want to pick the OS and platform that you are familiar with
supporting, since choosing an OS or software like Linux / Apache where you
don't know that software is probably going to end up in a compromised
server.
You also want to pick the technology that will do what you need it to do.
Apache supports some .ASP, but Windows and IIS is the choice if you need
.ASP or certain kinds of integration with other Microsoft server
technologies.
Last, you need to be able to know how to code your application code
securely. This is true whether you use .ASP or PHP. Again, unless there is
a special business need for a certain function, you should probably
seriously consider picking the one you know better. see
http://securityadmin.info for links to sites about writing secure web
application code.
"A. J." <mido_76@hotmail.com> wrote in message
news:#HHLH3#uCHA.456@TK2MSFTNGP09...
> Hi,
> I was discussing with my friends about ASP & PHP. most of them are sure
> that the PHP's security is better than ASP, and I really thought to move
> to PHP.
> I know that asp.net as better than ASP and faster than php, but the
> security problem with IIS is still like a nightmare facing me every
> weher .... so what do you think guys ??
> A. J.
>
> *** Sent via Developersdex http://www.developersdex.com ***
> Don't just participate in USENET...get rewarded for it!
- Next message: Daniel Weatherly: "Re: SSL Wildcard certificate on Win2K"
- Previous message: Keith W. McCammon: "Re: SSL Wildcard certificate on Win2K"
- In reply to: A. J.: "Security in IIS to where ???"
- Next in thread: Keith W. McCammon: "Re: Security in IIS to where ???"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
