- ABP Framework version: v5.3.3
- UI type: Angular
- DB provider: EF Core
- Tiered (MVC) or Identity Server Separated (Angular): yes
- Exception message and stack trace:
- Steps to reproduce the issue:"
Hi Supporting Team,
I'm planning for a major version upgrade in expecting for security enhancement. I've read through the changed logs but seemed not to catch as many related information about it. So I have a few things to consider:
- How is the security of v5.3.3 comparing to upper versions? Is it better? If so, what is the particular improvement?
- Does a framework upgrade ensure lesser security threats?
- What are the specific affects after replaced
Identity ServerwithOpenIddict? Does it have anything to do with security enhancement?
Could you guys share your thoughts about it?
3 Answer(s)
-
0
hi
The new version of the Abp framework will fix bugs, improve performance, etc. At the same time, the new version of Abp will also use the latest asp net core, which also brings better security.
We always recommend you use the latest version.
What are the specific affects after replaced Identity Server with OpenIddict?
https://docs.abp.io/en/abp/latest/Migration-Guides/OpenIddict-Step-by-Step https://docs.abp.io/en/commercial/latest/migration-guides/openIddict-step-by-step
https://github.com/abpframework/abp/issues/11989
-
0
Thank you. So how does the security of .NET 6 compare to .NET 7?
Because I've just done some research, .NET 7 has faster performance indeed, but nowhere mentions the improvement of security between 2 versions, so I assume it's pretty much the same, doesn't it?
-
0
Personally I believe net 7 is more secure.
https://github.com/dotnet/announcements/issues?q=is%3Aopen+is%3Aissue+label%3ASecurity
