RE: Gartner Group: DO NOT USE IIS! (from Midrange-L)

Jim,

I didn't read this article, but pass it along because some might find it
interesting.  (May read it later, if time/work permits.)

"Microsoft stands by IIS despite Gartner recommendation"
http://computerworld.com/nlt/1%2C3590%2CNAV47_STO64226_NLTAM%2C00.html

jjt



-----Original Message-----
From: midrange-nontech-admin@midrange.com
[mailto:midrange-nontech-admin@midrange.com]On Behalf Of Jim Damato
Sent: Wednesday, September 26, 2001 7:33 PM
To: midrange-nontech@midrange.com
Subject: Gartner Group: DO NOT USE IIS! (from Midrange-L)



Gartner says-

"...enterprises hit by both Code Red and Nimda immediately investigate
alternatives to IIS, including moving Web applications to Web server
software from other vendors, such as iPlanet and Apache. Although these Web
servers have required some security patches, they have much better security
records than IIS and are not under active attack by the vast number of virus
and worm writers. "

They're saying both that other web servers are more secure and that IIS is
under greater scrutiny from virus creators.  What do you think?  It seems
like you can read this two ways:  IIS is a more risky web server
implementation because virus creators target it, or virus creators attack
IIS because it's an easy target -- making it a more risky web server
implementation.

There's such a huge install base for Apache.  I would have expected Apache
to have been a victim of viruses/worms on the same scale as NIMDA by now.
Do you think that Apache is significantly more secure than IIS by design?
Why else would IIS be a target for virus or work attacks?

-Jim

James P. Damato
Manager - Technical Administration
Dollar General Corporation
<mailto:jdamato@dollargeneral.com>

_______________________________________________
This is the Non-Technical Discussion about the AS400 / iSeries
(Midrange-NonTech) mailing list
To post a message email: Midrange-NonTech@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-nontech
or email: Midrange-NonTech-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-nontech.