Mono vs Medium Trust

From OWASP
Revision as of 23:16, 22 July 2006 by Dinis.cruz (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Here is an interresting question which one is more secure?

Option A) 10 Asp.Net Application runinng on:

   * 1 Hardened Windows 2003 Server, IIS 6.0, Partial Trust .Net 2.0 Environment in 10 diferent IIS websites

or

Option B) 10 Asp.Net Application running on:

   * 10 images (XEN/VMWare) of an Hardened Linux ditribution, Apache and Full Trust Mono (1 Asp.Net website per image)

And which one will have more features? (remember that Medium Trust is a very limiting environment)

And which one will perform better? (remember that Partal Trusts in .Net are considerable slower than Full Trust ones)

Dinis.cruz