2 ms·
There are indeed approaches by Microsoft to run some IE edge processes in micro VMs. The hard part is figuring out how much communication to allow with the res
by perlgeek 10y ago
There are indeed approaches by Microsoft to run some IE edge processes in micro VMs.
The hard part is figuring out how much communication to allow with the rest of the OS. Do you want to allow sites to set cookies? For every domain, or just for the target domain? If the latter, what happens with a cookie set after a redirect to a different domain? Do you want to allow downloads to reach the host OS?
The more secure you make things, the more usability suffers, so you have to think really hard about all such problems.
- codedokode 10y agoI see no problem with downloads. Saving a file can be implemented with a helper that has access to disk but doesn't have other permissions (like accessing the network). The path to save a file is chosen by a user. The developers either care too much about compatibility with legacy software or just don't want to invest into implementing more secure environment. Patching existing software seems to be much cheaper.