>>>>>In fact the service record of IIS 7 for vulnerabilities has been much better than any of the *nix servers available.
>>>>
>>>>Interesting... do you have some stats to back that?
>>>
>>>A quick bing search on 'iis7 security vs apache' seems to at least put them on equal terms.
>>
>>Hmm... on both Bing and Google the first page of results has nothing newer than 2010, most results 2007 - 2009. That's about 1,000 years old in human years < g >
>
>And IIS has gone through major overhauls over the last few years - If anything I think the field tilts much more to IIS for security.

IIS 7.5 was apparently released October 2009, 7.0 before that. I believe the major rearchitecting of IIS was going from 5x to 6x, which was quite a while ago.

Coincidentally, Apache 2.0 was released exactly 10 years ago today, but there have been lots of point versions. Wikipedia says the most recent is 2.4.1, released 45 days ago.

So, comparisons of IIS 7.x vs. Apache 2.x may still be relevant even if they're a few years old.

A lot of ISPs are slow to change, NetCraft thinks your site is running on W2K/IIS5: http://toolbar.netcraft.com/site_report?url=http://kuhngroup.com