I wouldn't bother with ASP. It isn't VB. It is VBScript.  If you don't like J2EE, I suggest ASP.NET
which is a very robust architecture for Web Apps from Microsoft.  We have been deploying highly successful, high traffic apps since
the launch last year.  Of course there is much to be said about using what your company knows. 

	-----Original Message----- 
	From: Security_asp digest [mailto:security_asp@p...] 
	Sent: Thu 2/6/2003 6:16 PM 
	To: security_asp digest recipients 
	Cc: 
	Subject: security_asp digest: February 06, 2003
	
	

	-----------------------------------------------
	When replying to the digest, please quote only
	relevant material, and edit the subject line to
	reflect the message you are replying to.
	-----------------------------------------------
	
	The URL for this list is:
	http://p2p.wrox.com/list.asp?list=security_asp
	SECURITY_ASP Digest for Thursday, February 06, 2003.
	
	1. Re: Java Secuirty Compared to ASP Security...pros and cons
	
	----------------------------------------------------------------------
	
	Subject: Re: Java Secuirty Compared to ASP Security...pros and cons
	From: "Ken Schaefer" <ken@a...>
	Date: Fri, 7 Feb 2003 10:55:10 +1100
	X-Message-Number: 1
	
	~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
	From: "Jeremy Simpson" <jsimpson34@e...>
	Subject: [security_asp] Java Secuirty Compared to ASP Security...pros and
	cons
	
	
	: I'm fitting with out IT department to setup our site using ASP. They say
	: the standard for our company it Java and J2EE. I want to do it in ASP
	: since I'm a VB programmer and know more about ASP. What could I say to
	: convince them that ASP is just as safe? What are pros and cons of Java and
	: ASP. Java looks a lot like the C Programming Class I had in college years
	: ago. Isn't ASP just as sucure as Java? Any help would be great.
	
	~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
	
	...secure against what?!?
	
	If they say the standard is J2EE, then you should probably stick with that
	if they already have the server infrastructure and the programming
	knowledge. If this is the type of application that requires J2EE, then
	straight-out ASP probably isn't going to cope: you'll also be looking at
	COM+/MTS.
	
	In any case, you don't seem to be saying that the problem is security. The
	problem seems to be that you prefer to use ASP. Why not take the chance to
	learn something new?
	
	If the problem is the other developers' issues with security, then I suggest
	you post what they think are the security risks. Security is many things,
	and we need to talk specifics before a "yes" or "no" answer can be provided.
	
	Cheers
	Ken
	
	
	
	
	---
	
	END OF DIGEST