Is Microsoft re-thinking .Net security

I need some considered comment from anyone in the know to save my career and
stop my Company making flawed decisions.
My Company currently runs ASP with VB components on W2K servers, with W2003
servers just arriving. We are re-architecting and we were led to believe it
would be .Net using VB. Our Technical Architect is ex- Java/Unix and his
preference for this solution is barely hidden. Recently, a manager from
another Company visited us and advise that we went J2EE instead of .Net. His
revelation was that few large companies were going .Net because of security
concerns. He further claimed that MS had stopped pushing .Net at present,
why? because every man and his dog at Redmond was working on fixing these
massive security holes. Needless to say, this guy develops solely in J2EE,
so he would say that, wouldn't he. The solution at present is to develop the
front end in VB.Net and the web services in J2EE.
Now, given my limited knowledge of these things, this seems a bodgy solution
and impacts on my .Net career. Not good.
I haven't seen any information anywhere about MS redeveloping .Net on such a
scale and frankly I doubt the claims made. Does anyone out there have a
better angle on this? I need some good ammunition to throw back at my
Company before a final decision is made.
Sorry if this is the wrong forum, I am a little desperate.

TIA
John

Chris
Thu Sep 18 14:51:13 CDT 2003

.NET has an extremely robust security infrastructure. .NET continues to
evolve, but there is no fundamental rethinking of the platform.

http://www.cgisecurity.com/lib/J2EEandDotNetsecurityByGerMulcahy.pdf
http://archive.devx.com/enterprise/articles/dotnetvsjava/GK0202-1.asp
http://msdn.microsoft.com/security/default.aspx?pull=/library/en-us/dnnetsec/html/netframesecover.asp


--
Chris Jackson
Software Engineer
Microsoft MVP - Windows XP
Windows XP Associate Expert
--
"JM" <newsgroups@PANTSjemason.co.uk> wrote in message
news:ecFEelhfDHA.2484@TK2MSFTNGP09.phx.gbl...
> I need some considered comment from anyone in the know to save my career
and
> stop my Company making flawed decisions.
> My Company currently runs ASP with VB components on W2K servers, with
W2003
> servers just arriving. We are re-architecting and we were led to believe
it
> would be .Net using VB. Our Technical Architect is ex- Java/Unix and his
> preference for this solution is barely hidden. Recently, a manager from
> another Company visited us and advise that we went J2EE instead of .Net.
His
> revelation was that few large companies were going .Net because of
security
> concerns. He further claimed that MS had stopped pushing .Net at present,
> why? because every man and his dog at Redmond was working on fixing these
> massive security holes. Needless to say, this guy develops solely in J2EE,
> so he would say that, wouldn't he. The solution at present is to develop
the
> front end in VB.Net and the web services in J2EE.
> Now, given my limited knowledge of these things, this seems a bodgy
solution
> and impacts on my .Net career. Not good.
> I haven't seen any information anywhere about MS redeveloping .Net on such
a
> scale and frankly I doubt the claims made. Does anyone out there have a
> better angle on this? I need some good ammunition to throw back at my
> Company before a final decision is made.
> Sorry if this is the wrong forum, I am a little desperate.
>
> TIA
> John
>
>

JM
Thu Sep 18 15:59:46 CDT 2003

Thanks for that Chris.

"Chris Jackson" <chrisj@mvps.org> wrote in message
news:eJWb44hfDHA.3200@tk2msftngp13.phx.gbl...
> .NET has an extremely robust security infrastructure. .NET continues to
> evolve, but there is no fundamental rethinking of the platform.
>
> http://www.cgisecurity.com/lib/J2EEandDotNetsecurityByGerMulcahy.pdf
> http://archive.devx.com/enterprise/articles/dotnetvsjava/GK0202-1.asp
>
http://msdn.microsoft.com/security/default.aspx?pull=/library/en-us/dnnetsec/html/netframesecover.asp
>
>
> --
> Chris Jackson
> Software Engineer
> Microsoft MVP - Windows XP
> Windows XP Associate Expert
> --
> "JM" <newsgroups@PANTSjemason.co.uk> wrote in message
> news:ecFEelhfDHA.2484@TK2MSFTNGP09.phx.gbl...
> > I need some considered comment from anyone in the know to save my career
> and
> > stop my Company making flawed decisions.
> > My Company currently runs ASP with VB components on W2K servers, with
> W2003
> > servers just arriving. We are re-architecting and we were led to believe
> it
> > would be .Net using VB. Our Technical Architect is ex- Java/Unix and his
> > preference for this solution is barely hidden. Recently, a manager from
> > another Company visited us and advise that we went J2EE instead of .Net.
> His
> > revelation was that few large companies were going .Net because of
> security
> > concerns. He further claimed that MS had stopped pushing .Net at
present,
> > why? because every man and his dog at Redmond was working on fixing
these
> > massive security holes. Needless to say, this guy develops solely in
J2EE,
> > so he would say that, wouldn't he. The solution at present is to develop
> the
> > front end in VB.Net and the web services in J2EE.
> > Now, given my limited knowledge of these things, this seems a bodgy
> solution
> > and impacts on my .Net career. Not good.
> > I haven't seen any information anywhere about MS redeveloping .Net on
such
> a
> > scale and frankly I doubt the claims made. Does anyone out there have a
> > better angle on this? I need some good ammunition to throw back at my
> > Company before a final decision is made.
> > Sorry if this is the wrong forum, I am a little desperate.
> >
> > TIA
> > John
> >
> >
>
>