||Java vs. .NET Security, Part 3|
|Subject:||What is it that ".NET lacks completely"?|
Response to: What is it that ".NET lacks completely"?
Again - there's a difference between configuration and policy files. The article talks strictly about policies - those are enterprise.config, machine.config, and user.config files in .NET's world.
Application configuration is completely separate topic, and there's a lot to be desired from .NET there as well - I've even had to create a custom dynamic system of hierarchical config files.