> If.you have another metric please offer it. Evaluating the security of a product is a fairly rigorous task with no clear, objective 'this one is strictly mor

> If.you have another metric please offer it. Evaluating the security of a product is a fairly rigorous task with no clear, objective 'this one is strictly more secure' outcome possible. > I have no reason to believe the metrics are biased. I gave you multiple reasons why they could be based on a number of things. Not to mention that they seem flat out wrong - Chrome has dozens of security vulnerabilities patched every month. Maybe they don't create CVEs for all of them? > Of course you're free to just take it on faith that Edge is more secure because Microsoft says so I don't take it on their word. I have multiple reasons to believe that Edge is a pretty secure browser - I never said it is more secure than Chrome. Here is a really solid post, that I felt was particularly unbias, by Justin Schuh, who works for (or is the head of? Can't remember) Chrome's security. https://medium.com/@justin.schuh/securing-browsers-through-isolation-versus-mitigation-15f0baced2c2#.snvaii5dh https://medium.com/@justin.schuh/securing-browsers-through-i... As you can read, they both take fairly different approaches that are hard to compare objectively. Is a sandbox improvement more powerful than a new mitigation technique? Again, impossible to say. As Justin states, they're doing solid work though. > that the CVE listings have no purpose being used as a comparison. CVE has nothing to do with comparing the security of products and everything to do with notifying users of that products that they need to patch. > But for me, without finding some other metric to compare by I'll use this metric until there's a better replacement "I have no tools to compare, so I will use an arbitrary, incorrect tool to compare" This is totally faulty logic. CVEs are not a metric for evaluating security and they were never intended for such a thing. If you want to actually evaluate software security it is a serious, real process that requires more discipline than saying "well some numbers that have no meaning should be good enough".