Is ASP.NET MVC suitable for highly secure public sites?

Question

I am considering using ASP.NET MVC for the current project, but I have some security issues.

The site is viewed via HTTPS and should be very secure. Are there legitimate reasons why I should avoid ASP.NET MVC? Is there anything I need to know if I go this route?

Answer 1

First, Microsoft would develop an ASP.net MVC framework using "Preventing Security Development Errors: Lessons Learned in Windows Live Using ASP.NET MVC . "

, Microsoft ASP.net MVC live.com. .

Stackoverflow

/fooobar.com/... ASP.net MVC . SO, . .

ASP.net vs ASP.net MVC

• - ASP.net ASP.net MVC

, , .

Answer 2

ASP.NET MVC -. , .

Answer 3

, ASP.NET MVC?

. .

-, ?

, , - .
, .

.

Answer 4

. , "" , , ASP.NET/MVC .

, , "" asp.net Web Forms, , MVC. , .

Asp.NET MVC

Answer 5

, MVC, , . , - ASP.NET, , .

:

• WebForms , , Cross Site Request Forgery, ( viewstate). ASP.NET MVC , ... ( Html.AntiForgeryToken), , .

• MVC , , , . , MVC ( ), , .

, MVC, .

Regarding security, I think that the structure you use is much less important than a thorough understanding of common security problems, as well as your own application threat model.