This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Mono vs Medium Trust

From OWASP
Revision as of 04:17, 23 July 2006 by Dinis.cruz (talk | contribs)

Jump to: navigation, search

Here is an interresting question which one is more secure?

Option A) 10 Asp.Net Application runinng on:

  • 1 Hardened Windows 2003 Server, IIS 6.0, Partial Trust .Net 2.0 Environment in 10 diferent IIS websites

or

Option B) 10 Asp.Net Application running on:

  • 10 images (XEN/VMWare) of an Hardened Linux ditribution, Apache and Full Trust Mono (1 Asp.Net website per image)

And which one will have more features? (remember that Medium Trust is a very limiting environment)

And which one will perform better? (remember that Partal Trusts in .Net are considerable slower than Full Trust ones)

Dinis.cruz