IE 7's Security
Category: Internet...
Posted Friday, February 10, 2006 at 09:41 PM [GMT-6]

The release of the public beta of Internet Explorer 7 is the subject of much discussion around the web. Most reviews I've read are from the perspective of web developers and how the new version seems to conform (or not) with current standards, especially CSS. Those reviews are mixed -- some important flaws have been fixed; others seem to still be present -- but everyone acknowledges much can change between now and the release of 7.0.

The biggest gripe about IE, at least among those who care about such things (which should be but amazingly isn't everyone) has always been its woeful security. And when it comes of matters of security, the go-to guy is Bruce Schneier, and he's weighing in with a first look at how 7b2 addresses some of the known vulnerabilities. As with CSS, the report card is mixed.

Even if you don't plan to use IE, the post is interesting because it explains in layman's terms some of the generic security problems that browsers confront. And Schneier also describes some new initiatives Microsoft is considering that may well find their way into other browsers.

Unfortunately for Windows users, IE is still so closely integrated with the operating system that certain vulnerabilities simply can't be fixed, and this will continue to be the case until Vista comes on the scene.

Technorati tags: |

Permalink
Comments

Sounds like they're trying.

I wonder how much they can realistically change. If some of this stuff isn't a basic assumption in the original code, it can be nearly impossible to make fixes.

The part about having only a single function for all URL processing is a great example of overcoming original design problems.

Posted by: Brian at February 11, 2006 06:35 AM

Won't change until Vista comes along, eh? So at least another five years. ;-)

Sometimes, it's almost too easy.

Posted by: bryan at February 11, 2006 07:49 PM

Whoa...two Bri/yans...my head is spinning...

This seems to be a good example of the law of unintended consequences...or shortsightedness, however you want to look at it. I'm sure that at some point in the distant past, someone at MS was sure that the idea of tightly integrating the browser with the OS had a lot of things in its favor. I wonder when it began to dawn on them that it was all going terribly wrong?

Posted by: Eric at February 11, 2006 08:55 PM

test comment after move

Posted by: drew at February 17, 2006 07:12 PM
Post a comment [Take your time...we're in no hurry.]
Note: You must provide either a website URL or an email address...but there's no rule that says you have to tell the truth. If you don't want your email address published on this site, just input a website URL, or make up an email address.









Remember personal info?