Internet Explorer security settings
Friends don't let friends use Internet Explorer.
They recommend something safer. Why? IE is tightly integrated with Windows
itself and has lots of marginally useful,
but powerful bells and whistles. The combination
opens your computer up to all kinds of dirty
tricks. You can tame IE though. If you insist
on using IE for any but a few sites that
you absolutely trust read on:
Tight Internet Explorer settings won't improve
your security unless you respond appropriately
to any "prompt" dialog boxes that
pop up. For example, if the prompt asks if
you want to allow an ActiveX control to run,
decide if you completely trust the site before
you click OK (usually you can view the site
even if you don't.
Unfortunately, if you use these settings,
you'll be bugged with a bunch of promts that
ask if it's OK to run scripts. Some people
take the risk and Enable active scripting. I normally use IE for
just a few sites that won't work otherwise.
I add these sites to my "Trusted Sites Zone" to stop the chatter. It's easy to
do that "on the fly."
Access security settings in Internet Explorer
by clicking Tools ("View" in earlier
versions of IE) > Internet Options >
Security (tab) > click the "Custom
Level" button. Use the recommended settings
listed below. (You may not find all these
options, just set the ones you do have.)
- Download signed ActiveX controls: Disable or Prompt
- Download unsigned ActiveX controls: Disable or Prompt
- Initialize amd script ActiveX controls not
marked as safe: Disable or Prompt
- Run ActiveX controls and plug-ins: Disable or Prompt
- Script ActiveX controls marked safe for scripting:
Disable or Prompt
- Downloads: Enable
- Font Download: Prompt
- Access data sources across domains: Prompt
- Allow META REFRESH: Enable
- Display mixed content: Prompt
- Don't prompt for client certificate selection...:
Disable
- Drag and drop or copy and paste files: Prompt
- Installation of desktop items: Prompt
- Allow cookies that are stored on your computer:
Disable
- Allow per-session cookies (not stored): Enable
- Java permissions: High safety
- Lauching programs and files in an IFRAME:
Disable or Prompt
- Navigate sub-frames across different domains:
Disable or Prompt
- Software channel permissions: High safety
- Submit nonencripted form date: Disable or Prompt
- Userdata persistance: Disable
- Active scripting: Disable or Prompt
- Allow paste operations via script: Disable or Prompt
- Scripting of Java applets: Disable or Prompt
- Logon: Automatic logon only in Intranet zone
Privacy settings
Privacy is totally different from security.
Privacy is mostly controlled by cookie settings.
Cookies are not a significant threat to security.
Internet Explorer 6.0 does offer privacy
(cookie) settings as well as security settings.
To get there click Tools > Internet Options
> Privacy. I have my privacy set to "Medium
High". I'd recommend at least "Medium".
|