Internet Explorer: Difference between revisions

From MozillaZine Knowledge Base
Jump to navigationJump to search
(→‎Secure Internet Explorer: link to much more in-depth recommendations for Windows security)
(→‎Secure Windows and Internet Explorer: Update to IE7 "if you are using Windows XP". Restored IE6 instructions for users who can't upgrade)
Line 8: Line 8:
* Upgrade to at least Windows XP Service Pack 2 (or Windows Vista)
* Upgrade to at least Windows XP Service Pack 2 (or Windows Vista)
* Enable Windows automatic updates
* Enable Windows automatic updates
* Upgrade to Internet Explorer 7
* Upgrade to Internet Explorer 7 if you are using Windows XP
* Configure Internet Explorer security settings as recommended by SANS
* Configure Internet Explorer security settings as recommended by SANS
* Use anti-virus and anti-spyware software
* Use anti-virus and anti-spyware software
* Use an alternative browser instead of Internet Explorer
* Use an alternative browser instead of Internet Explorer


<!-- I think I wrote this for IE 6. It should probably updated or removed.
If you can't upgrade to Internet Explorer 7, you can make Internet Explorer 6 more secure as follows:
*Open Internet Explorer
*Open Internet Explorer
*Go to Tools | Internet Options... | Security
*Go to Tools | Internet Options... | Security
Line 25: Line 25:
**<nowiki>http://download.windowsupdate.com</nowiki>
**<nowiki>http://download.windowsupdate.com</nowiki>
With only the above three sites in the trusted sites zone, the trusted sites zone set to medium security, and all other zones set to high security, Internet Explorer is as secure as it can be while still leaving Windows Update functional. To be as safe as possible, use Internet Explorer only when absolutely necessary. IE generally has known highly critical security vulnerabilities, and even well-known sites can contain exploits that a fully patched version of Internet Explorer is vulnerable to. In addition to securing Internet Explorer, you may also want to hide the icon as described in the next section.
With only the above three sites in the trusted sites zone, the trusted sites zone set to medium security, and all other zones set to high security, Internet Explorer is as secure as it can be while still leaving Windows Update functional. To be as safe as possible, use Internet Explorer only when absolutely necessary. IE generally has known highly critical security vulnerabilities, and even well-known sites can contain exploits that a fully patched version of Internet Explorer is vulnerable to. In addition to securing Internet Explorer, you may also want to hide the icon as described in the next section.
-->


===Hide the Internet Explorer icon from the desktop===
===Hide the Internet Explorer icon from the desktop===

Revision as of 14:50, 6 December 2007

Internet Explorer is the most widely-used web browser and it is included as part of the Microsoft Windows operating system. Mozilla browsers such as Firefox have recently gained significant popularity over Internet Explorer, one probable reason being the publicity generated by Internet Explorer security flaws. Also, some appreciate what they see as the greater simplicity and efficiency of Firefox. Others continue to support Internet Explorer because certain sites, especially those dependent on Microsoft's ActiveX technology, reject all browsers except Internet Explorer. Some of these sites can be visited anyway via user agent spoofing, if a Mozilla browser extension such as user agent switcher is used.

If you no longer wish to use Internet Explorer

The easiest route would be to make your Mozilla browser the default browser and simply stop using Internet Explorer. You can also consider these other options:

Secure Windows and Internet Explorer

The SANS institute recommends the following precautions for Windows users. Remember that parts of Internet Explorer can be used by other programs, so users should follow the advice even if they don't click on the blue e.

  • Upgrade to at least Windows XP Service Pack 2 (or Windows Vista)
  • Enable Windows automatic updates
  • Upgrade to Internet Explorer 7 if you are using Windows XP
  • Configure Internet Explorer security settings as recommended by SANS
  • Use anti-virus and anti-spyware software
  • Use an alternative browser instead of Internet Explorer

If you can't upgrade to Internet Explorer 7, you can make Internet Explorer 6 more secure as follows:

  • Open Internet Explorer
  • Go to Tools | Internet Options... | Security
  • Set the security level for all zones except trusted sites to high
  • Set the security level for trusted sites to medium
  • While the trusted sites zone is selected, click on the Sites... button
  • Uncheck Require server verification (https:) for all sites in this zone
  • Add:
    • http://*.update.microsoft.com
    • https://*.update.microsoft.com
    • http://download.windowsupdate.com

With only the above three sites in the trusted sites zone, the trusted sites zone set to medium security, and all other zones set to high security, Internet Explorer is as secure as it can be while still leaving Windows Update functional. To be as safe as possible, use Internet Explorer only when absolutely necessary. IE generally has known highly critical security vulnerabilities, and even well-known sites can contain exploits that a fully patched version of Internet Explorer is vulnerable to. In addition to securing Internet Explorer, you may also want to hide the icon as described in the next section.

Hide the Internet Explorer icon from the desktop

Right-click on the Desktop -> click Properties -> Desktop -> Customize Desktop -> Desktop Icons -> Internet Explorer <uncheck this

Another way (in Windows XP, possibly different for other versions of windows) Start -> Set Program Access and Defaults -> Add/Remove Windows Components -> Uncheck Internet Explorer -> Click Next. Now Internet Explorer has been partially uninstalled.

Remove Internet Explorer from Windows

Although uninstalling Internet Explorer from Windows is possible, you are strongly advised not to remove IE, for a number of reasons [1]:

  1. Many web sites are programmed to work only with Internet Explorer. For example, webmasters authoring a site may have not tested with other web browsers. The majority of websites on the Internet should work with Mozilla browsers, but there are some sites that appear distorted or inaccessible unless IE is used as a browser.
  2. Windows Update requires Internet Explorer. As an alternative, you may be able to manually download security updates, but it will require more monitoring and work than letting Windows Update handle this for you.
  3. Some applications depend on libraries installed by Internet Explorer. These applications may no longer work or they may behave unexpectedly if IE is removed.
  4. Some anti-virus products require IE for updates. Live updates or automatic DAT updates used by both Norton and McAfee are built on Internet Explorer's foundation. You may be able to manually update your virus signature files but it could require more work.
  5. Both removing and restoring IE is risky and difficult. IE is complex with extensive hooks built into Windows, for efficiency and functionality. Thus unplugging it from your system may impact Internet connectivity, Windows functionality, and break functionality in Microsoft Office and non-MS products.
  6. IE is more than a browser, it is the foundation for Internet functionality in Windows.

If you still want to remove IE despite these warnings, there are third-party programs available like LitePC that remove IE but these are most definitely not recommended for novice users. Instead of uninstalling IE, you should consider the alternatives first, such as making IE more secure, or hiding Internet Explorer.

Internet Explorer 7

The following information applies to Windows XP operating systems.

Internet Explorer 7 can be installed as an upgrade on Windows XP systems [2]. If a beta version of Internet Explorer 7 is installed on Windows XP and Firefox or another browser is the default browser, webpage links in Outlook or Outlook Express mail messages will not start the browser [3] [4].

Updating to the latest release of Internet Explorer 7 may resolve the issue or, you can uninstall IE7, which will restore Internet Explorer 6, as follows.

Removing Internet Explorer 7

Note that IE7 is included with Windows Vista and cannot be uninstalled using this method.

  • Click your Start button, then go to Control Panel
  • Go to Add or Remove Programs
  • Go to Change or Remove Programs and make sure "Show updates" is checked.
    • If you are running Internet Explorer 7 Beta 2 Preview or a later version, it is no longer necessary to check "Show updates."
  • Scroll down on the list and highlight the version of Internet Explorer 7 that you are running.
  • Click "Remove" to uninstall. [5]

See the Release Notes for Internet Explorer 7 for additional information.