Re: What are the 'Real World' security advantages of the.Net Framework and the JVM?

[Florian Weimer <fw () deneb enyo de>]

* Edward Ray:

> .NET Security is an oxymoron, IMHO.  If anyone has a different take on this
> topic that is has not partaken of the Microsoft Kool-Aid on this subject, I
> would appreciate enlightenment.

There are rumors that Internet Explorer on .NET-enabled systems can
download and execute untrusted CLI bytecode, without user
confirmation.  (By design, not as a bug, just like Java applets.)
This means that some bytecode verifier and security manager is still
needed.  I couldn't find definite documentation on the subject,
though.

However, it seems that .NET does not put as much emphasis on mobile
code as Java, so these components are perhaps not *that* important.