Search
Sponsors
New Security Features in IE 7.0
The first thing we heard in regard to IE security is that Microsoft is taking a “big picture” look at the threat environment, recognizing that a single application – the Web browser – has multiple usages (on the intranet, on extranets, and on the Internet) that require different levels of security. That concept has long been exemplified by IE’s use of security zones, and the zone feature carries over to IE 7.0 but with some major improvements that give administrators (in the corporate environment) and users (in the home and small business environments) more granular control over browser behavior that impacts security. At the same time, many security features will be more transparent to end users. One important priority is that IE’s new features will be turned off by default if there is any possible security risk involved in implementing them. It’s a simple idea, and part of the “secure by default” leg of Microsoft’s trustworthy computing “SD3” (Secure by Design, Secure by Default and Secure in Deployment) position.
Microsoft’s new security philosophy is all about defense in depth, or multi-layered security, and they’ve made an effort to make the new security features proactive instead of relying on patching problems as they arise. Toward that end, they’ve made fundamental architectural changes to the browser software to address anticipated future threats.(continue at source)