Agreed on many points, however as a software consumer (large-scale), I have found that my ability to get software that has been more thoroughly tested and has undergone third-party review has been aided by my willingness to pay for it. Finding the lowest price and the best development practices in one product is a rare combination, especially for enterprise-class products. That's not to say that a more secure product is a license to charge the moon - far from it. It is, however, important for a consumer to treat software like any other consumer product - don't get ripped off, but if you want quality, be prepared to pay a bit extra. It's worked for me and, much as I hate to admit it, I've been burned each time I've tried to cut corners.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/476/35100#35100