Re: .Net and security

On Tue, 23 Nov 2004 07:32:51 +0200, Damhuis Anton
<[email protected]> wrote:
...
> I have been programming in (Classic) ASP, and will be moving over to .Net soon.
> 1) Is the .Net programming environment by default more secure then what ASP is/was?
That's kind of  subjective, but I would generally say yes.  The
ability to put your code and codebehind pages and include libraries
allows for more clean readable code.  I think classic ASP can hide
logic bugs because of the nature of intermingled code.

> 2) Are there any security issues with the "view state" that .Net holds?
I can't speak to this.

> 3) Also are there better security advantages using J# , C# over VB in .Net?
All of these languages are compiled into the same language (read up on
the CLR), so in theory they are each as secure as each other. 
However, I would want to know more about how each language handles
variable typing to be certain.  I can only speak to C# on this, but it
requires explicit conversions and seems to have a lot of safegaurds.

I hope that starts to answer your question.

-Tim