IIS vs. Apache Security Defects

This post is especially for Izendooren! 😉

Michael Howard was curious about how many defects turned up in IIS6 and Apache2.So he made up this post in which he shows the following graphs:

All we can say is IIS6 looks pretty solid! But a lot of other people asked him, how the results were for IIS5 and Apache1.3 and how SSL comes into play… So he made another post here.

Michael Howard however is a Microsoft employee, but it’s good to know these graphcs come from Secunia.