Microsoft Tightens IE 7's Security
Browser's default security settings will change to match common home, business setups. — Microsoft has detailed several changes in the way its upcoming Internet Explorer (IE) 7 browser will classify Web sites for security, aiming to reduce the likelihood …
Context & Ripple Effects
Microsoft's announcement that Internet Explorer 7 will reclassify Web sites under stricter default security settings arrives mid-way through an unusually busy December 2005 for the company, which in the same weeks launched Windows Live Local at local.live.com and took the Xbox 360 to Japan against Sony and Nintendo. With no syndicated pickups recorded, the story travelled quietly, but it signals that Microsoft is treating browser hardening as a ship-blocking workstream rather than a post-release patch cycle.
First-order effects
- Home and business users running IE 7 out of the box get security-zone behavior tuned to common setups by default, removing the burden of manual hardening that earlier versions placed on the user.
Second-order effects
- Web site operators whose pages fall into stricter zones under the new classification face immediate compatibility and support costs, since content that ran silently before may now trigger warnings or blocked actions.
Third-order effects
- If the pattern holds across browser releases, secure-by-default configuration becomes a vendor obligation rather than an end-user choice, raising the bar every competing browser must meet on shipped settings.
The trend: Browser makers are shifting from opt-in security hardening to shipping restrictive defaults, making the vendor's preset decisions the front line of Web client defense.