The other day I was at a potential customer site when they told me that an adviser told them that ColdFusion is not very scalable and not secure. I told them that quite the opposite is true but I wished I would have had this article at hand 
Information Risk Management Plc (IRM), a vendor independent information risk consultancy company in London, has tested the new ColdFusion 8 version and found it to be…:
“IRM’s security evaluation of ColdFusion 8 revealed that the product has been well designed with security as a major consideration during development.”
“Overall IRM was impressed with Adobe’s integration of security processes in the development lifecycle, the result of which can be seen in ColdFusion 8, a product that withstands stringent security testing with relative ease. All of the new features incorporated in this release adhere to highest levels of application security enforcement without any compromise on functionality.”
You can read the whole article here. Guess, Adobe will face the biggest run on ColdFusion 8 and the largest sales in Coldfusion’s history. Wanna bet?
If you enjoyed this post, make sure you subscribe to the RSS feed!
Yeah I’ve put up with those lame arguments for the last 12 years (that’s right - ColdFusion turned 12 this month).
Oh and the "proper" url is at:
http://www.dcooper.org/ColdFusion_8_Product_Security_Brief.pdf
(NB requires Acrobat Reader)
I also digged the article - based on Damon Cooper’s original blog post her:
http://www.actcfug.com/index.cfm?actcfug=NewsView&NewsID=369
Hi Peter
I did not see that you posted it as well. Kinda hard to keep up with everything
I just downloaded the PDF and put it on our server so if it is "lost" in the future we still got it.
I sure hope that ColdFusion will get a boost from articles like that….
It looks like Adobe paid for that “independent study” (it pretty much reads like a paid advertisement):
http://www.irmplc.com/index.php/65-RandD-Services
“Clients for whom we have conducted product security reviews include:
Adobe (Software - ColdFusion MX 7.0.2)
Adobe (Software - ColdFusion 8)”