RE: Gartner Group: DO NOT USE IIS! (from Midrange-L)

-----Original Message-----
From: midrange-nontech-admin@midrange.com
[mailto:midrange-nontech-admin@midrange.com]On Behalf Of Jim Damato
Sent: Wednesday, September 26, 2001 7:33 PM
To: midrange-nontech@midrange.com
Subject: Gartner Group: DO NOT USE IIS! (from Midrange-L)



Gartner says-

"...enterprises hit by both Code Red and Nimda immediately investigate
alternatives to IIS, including moving Web applications to Web server
software from other vendors, such as iPlanet and Apache. Although these Web
servers have required some security patches, they have much better security
records than IIS and are not under active attack by the vast number of virus
and worm writers. "

They're saying both that other web servers are more secure and that IIS is
under greater scrutiny from virus creators.  What do you think?  It seems
like you can read this two ways:  IIS is a more risky web server
implementation because virus creators target it, or virus creators attack
IIS because it's an easy target -- making it a more risky web server
implementation.

There's such a huge install base for Apache.  I would have expected Apache
to have been a victim of viruses/worms on the same scale as NIMDA by now.
Do you think that Apache is significantly more secure than IIS by design?
Why else would IIS be a target for virus or work attacks?

>> Jim,

>> I read it both ways...

>> The M$ corporate culture brings these attacks on themselves, there's no
doubt about that.

>> Plus, the same corporate culture may, or may not, produce more buggy OS
code.  I can't really say for sure, not having used NT-based Windoze.

>> Either way you read it, the iSeries should be making some inroads on the
Apache server market (don't know whether they are...)

>> jjt

>> "Have a GREAT day, and a BETTER ONE TOMMORROW" (sm)


-Jim

James P. Damato
Manager - Technical Administration
Dollar General Corporation
<mailto:jdamato@dollargeneral.com>

_______________________________________________
This is the Non-Technical Discussion about the AS400 / iSeries
(Midrange-NonTech) mailing list
To post a message email: Midrange-NonTech@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-nontech
or email: Midrange-NonTech-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-nontech.