A short outline of what IIS 7.0 brings to the security table.
Secure by default
- builds on IIS 6.0’s success
- all features and modules disabled by default
Modular
- lightweight server core
- 40 feature modules can be plugged in
- public extensibility APIs – build your own modules and features (i.e. replace built in auth, provide your own response compression)