Women in Technology

Hear us Roar

  Java vs. .NET Security, Part 3
Subject:   What is it that ".NET lacks completely"?
Date:   2004-07-12 09:44:01
From:   dpiliptchouk
Response to: What is it that ".NET lacks completely"?

Ray, your comments are indeed based on misunderstaning:

1. Remember the overall context where the command-line parameters mentioned? I talk about overriding default poilicy by passing cmd-line parameters for SECURITY POLICY files, not general "parameters". See also my reply to your comment on the first article to understand the issue.

2. First: a hierarchy of web.config files is applicable to Web applications only. Secondly: again, we're talking about SECURITY POLICY files here, not general configuration. Lastly: anything can be built or added - it's important that Java provides this capability out-of-the-box.
Configuration features in .NET are quite limited, and to provide any meaningful hierarchy, one'd have to do quite a lot of programming (Just for the record - I've gone through this first-hand, so I know what I'm talking about).

3. I'm not sure what you objection was in this item.

4. Again - both platforms provide this CAS feature, I never denied this.

Please, if there's more misunderstanding, send me a message directly - this is not really a public forum to exchange ideas or clear questions.


Full Threads Newest First

Showing messages 1 through 2 of 2.

  • What is it that ".NET lacks completely"?
    2004-12-01 21:34:07  happygilmore [View]

    the desktop application of web.config is called "application.config"

    Google "application.config" then please reply to Ray's comments. I do not believe he is mistaken.
    • What is it that ".NET lacks completely"?
      2004-12-02 05:02:52  dpiliptchouk [View]

      Again - there's a difference between configuration and policy files. The article talks strictly about policies - those are enterprise.config, machine.config, and user.config files in .NET's world.

      Application configuration is completely separate topic, and there's a lot to be desired from .NET there as well - I've even had to create a custom dynamic system of hierarchical config files.