[thelist] From PHP to...?

[Warden, Matt]

> Hmm.  In this case, the language itself actually
> does have stuff built in that makes it more secure.
> How the code is executed by the JVM is actually more
> secure *at the outset* than ASP.
>
> No denying you still gotta code with security in mind,
> since you can do lots of things to make
> an ASP app more secure than Java.  It's just that
> Java comes with some nice security features built
> in, all else equal.

Well, so does ASP, but you're kind of missing my point. My point was to make
sure people on thelist don't say "oh, Java takes care of security, so I can
worry less about it". No, not really. It's kind of like riding a bike while
wearing a helmet. Still gotta make sure you don't crash, but if you do, you
have that extra protection...



--
mattwarden
mattwarden.com