RE: ASP vs. ASP.NET

["Calderon, Juan Carlos (GE Commercial Finance, NonGE)" <juan.calderon () ge com>]

Hi

I don't think one is more secure than the other as you said there are ways to secure both. However, ASP is harder to 
secure than ASP.NET from the application layer point of view. 

Imagine this, what do you have to do to implement a Role based authorization scheme in ASP 3.0? and what's for 
ASP.NET?, much different uh? so basically the same think can be performed in both technologies, but implementing the 
same security level will be faster in the newer technology.

Cheers
-Juan C

-----Original Message-----
From: Bénoni MARTIN [mailto:Benoni.MARTIN () libertis ga]
Sent: Viernes, 08 de Octubre de 2004 06:06 a.m.
To: webappsec () securityfocus com
Subject: ASP vs. ASP.NET


Hi list!

I was wondering if if was a real lack of security developping nowadays in ASP instead of ASP.NET. According to some 
people, if everything is well written and the web server fully patched and uptodate, ASP is quite good. For others 
ASP.NET is really more powerfull than ASP and the latter is old-fashuined ...

So what about you, MS users ?

Thanks !