Don't forget that ASP pages are simply text files that get "parsed" through The Internet Information Server before being sent to your normal web server.
So this means ANYTHING that can browse the web can browse webpages created with ASP.
The user never sees any of the ASP code becuase it has already been stripped out by the time it reaches them.
Code:
ASP with IIS Web Server User uses
HTML ------------> Pure HTML --------------> Browser to
embedded view