I am not one that usually responds or posts here neither do I work for Microsoft or DNN, but I feel the need for those that are frequent readers of these forums and users of Dotnetnuke to express mine opinion.
CT wrote:
There are several completely different issues/questions here:
1) The technical question: which is the precisely correct recommended version of attributes for the web.config element ?
2) Are the recommendations of the "manufacturer" Microsoft and the "reseller" DotNetNuke consistent with each other as stated publicly by official representatives of each?
3) Whose recommendation should be followed: the "manufacturer" Microsoft or the "reseller" DotNetNuke?
The APPEARANCE of public recommendations that are consistent with each other between manufacturer and reseller remain critical to assuring confidence in the reseller. When the reseller does not appear to comply with the public recommendations of the manufacturer, it raises concerns.
One of the things that I feel need to clarify is that Dotnetnuke is not a reseller (akin to saying that DNN is one of MS's pawns).
1. Dotnetnuke is a Company that develops software impementing the ASP.NET Framework which was developed by one "Company" named Microsoft.
2. The ASP.NET Framework is a developer platform upon which software developers may design whatever software that they so choose. Much like perl, php, java, etc.
3. The "manufacturer" is in fact Dotnetnuke, and their product is the Dotnetnuke Framework provided in currently three formats. 1. Community 2. Professional 3. Enterprise.
I believe from what I have seen and experienced from the DNN Team is a dedication to their product and a dedication to those that use their product; especially in their ability to quickly impliment security vulnerabilities when they have been made aware of them.
P.S.
You know microsoft is not the only company in the world that has security issues with its software. The problem is that because they are so well known they get all the publicity. Think of it this way if Linux was on top they would be the ones on the front page. Hey think of it this way those that find the breaches are doing Microsoft a favor: they are helping them make a better and safer product for you.
Thanks