Comments on: IIS vs. Apache: Can statistics provide an argument?

By: Michael

Michael — Sat, 07 Jul 2007 04:38:56 +0000

Cos, you’ve got me there. But I have a good excuse for not having a picture of my cat on this blog. I simply have no cat No, seriously. This sentence was meant ironically, of course. The point is that most “users�? in the Google and Netcraft statistics are private people who just bought a domain to show the world how much they love their cat. In my view, it doesn’t make sense to count these people in any statistics mentioning Apache or IIS because they have no idea about web server software. On the other hand, I deliberately decided to use Apache, I installed it and configured it myself. So I am a “real Apache user�?. However, I am not a “typical Apache user�?.

By: cos

cos — Wed, 04 Jul 2007 22:49:28 +0000

> The typical “Apache user�? only has a picture of himself and of his cat kitty on his “web site�?.

You were going just fine until you said that.

(I note with some amusement that this very site is hosted on Linux/Apache. where’s the picture of your cat, then?)

By: Michael

Michael — Tue, 03 Jul 2007 18:16:19 +0000

I think most bloggers use the service of weblog hosting companies such as MySpace. Usually, they keep their systems up-to-date. In corporate environments you often find quick-and-dirty ASP.NET apps with many security holes. Due to the complexity of .NET it is not easy to write secure apps with it.

By: Lukas Beeler

Lukas Beeler — Tue, 03 Jul 2007 17:59:31 +0000

IIS most likely is used more often in corporate environments. Hence, you will find often more complex web applications on IIS systems thereby increasing their attack surface.

On the other hand, many personal blogs, websites, forums, etc. are more likely to run on Linux/Apache (due to no cost), but not maintained properly (updates, secured, etc.) – while in corporate environments the system usually are taken care of by professionals.