The debate is out there, which is more important.  I discuss what they are and how they both play a key role in securing an application.