DHTML or Silverlight??

[codeflat]

I am developing an enterprise application and I am still not sure if I should use DHTML or Silverlight.

I have some concerns regarding Silverlight's security because it is a
client-side applications.

Does anyone who have experienced with Silverlight applications can answer this?

tnx C.F

[sraheem]

If it can be done in DHTML then do it in DHTML.

[TheCPUWizard]

It depends primarily on your target audience.

Silverlight requires a specific runtime, but so does DHTML (ie JavaScript).

The latter has a higher adoption ratio right now, but with the release of 2.0 Silverlight is gaining rapid acceptence as it provides capabilities that were previously not practical.

Above all, utilize an MVP pattern, and keep your "P" as slim as possible (this means absolutely NO calculations or decisions!!!!)

[toraj58]

I am developing an enterprise application and I am still not sure if I should use DHTML or Silverlight.

I have some concerns regarding Silverlight's security because it is a
client-side applications.

Does anyone who have experienced with Silverlight applications can answer this?

tnx C.F

DHTML is also client side.

Silverlight takes advantage of technologies in Web browsers as well as Microsoft's .Net programming framework to make Silverlight as secure as possible.
For example, the Silverlight plug-in executes inside a Web browser's virtual sandbox. this means that even if malware or a hacker is able to crack Silverlight, he shouldn't be able to jump to other applications or servers; provided the Web browser's sandbox is fully secure.

Sandboxing inside the browser is a common and well-understood concept and providing that there are no flaws in the browser technology, then it should be relatively secure.

Moreover, Silverlight is an extension of Microsoft's .Net technology, which has a proven track record of security.

also please notice that most criticism has been directed at Asynchronous JavaScript and XML (AJAX), the popular rich media enabling technology, and its vulnerability to a form of attack called cross-site scripting (XSS).