Microsoft Planning 'Lower Rights' IE 7.0

Ein

Adept
ORLANDO, Fla.—A senior Microsoft executive on Monday confirmed that the upcoming Internet Explorer 7.0 browser upgrade will ship with reduced privilege mode turned on by default to help thwart browser-based hacking attacks.

A quick look at some features:

* reduced privilege mode becomes the default
* no cross-domain scripting and/or scripting access
* improved Secure Sockets Layer (SSL) user interface;
* possible integration between IE 7.0 and Microsoft's Windows anti-spyware service, which currently is in beta.

During a strategic briefing on security at the TechEd conference, corporate VP of Microsoft Corp.'s Security Business & Technology Unit Gordon Mangione said IE 7.0 will be chock full of security and privacy enhancements, all aimed at addressing the biggest threats facing Web surfers today.

"We've re-architected it to defend against exploits," Mangione said, describing IE 7.0 as a "lower rights IE" with base minimal privileges.

The new browser will also feature major changes in the way files are executed and new anti-spoofing and anti-phishing technology to let users identify fake scam Web sites.

Source
 
Back
Top