WebApp Sec mailing list archives

RE: ASP vs. ASP.NET


From: "Michael Howard" <mikehow () microsoft com>
Date: Sat, 9 Oct 2004 15:03:09 -0700

You can write secure and insecure code in ASP, ASP.Net, JSP, PHP, Perl etc etc. 

ASP.NET offers great support to help you include security "features" into your Web app, which are not present in ASP.

[Writing Secure Code] http://www.microsoft.com/mspress/books/5957.asp
[Protect Your PC] http://www.microsoft.com/protect
[Blog] http://blogs.msdn.com/michael_howard

[On-line Security Training] http://mste/training/offerings.asp?TrainingID=53074


-----Original Message-----
From: Bénoni MARTIN [mailto:Benoni.MARTIN () libertis ga] 
Sent: Friday, October 08, 2004 4:06 AM
To: webappsec () securityfocus com
Subject: ASP vs. ASP.NET

Hi list!

I was wondering if if was a real lack of security developping nowadays in ASP instead of ASP.NET. According to some 
people, if everything is well written and the web server fully patched and uptodate, ASP is quite good. For others 
ASP.NET is really more powerfull than ASP and the latter is old-fashuined ...

So what about you, MS users ?

Thanks !


Current thread: