4 ms·

"totally seamless... you’d never be able to tell the difference... designed exclusively for businesses" Sounds like a security nightmare. I assume IE mode is v

"totally seamless... you’d never be able to tell the difference... designed exclusively for businesses" Sounds like a security nightmare. I assume IE mode is vulnerable to XSS attacks that the normal Chromium mode protects against. So a user might be duped into thinking they are safe when they visit a random site that forces IE mode. Because it's "totally seamless" they won't notice. Better yet, it only affects business users, the prime target for XSS.

javagram 8y ago
If the feature is in fact designed exclusively for businesses, the IE11 mode will only activate on a whitelisted list of sites pushed out via your corporate provisioning process. I believe this is how the feature already works today in Edge anyway, it just opens a new window instead of a new tab.
- Mindwipe 8y ago
  The biggest offender seems to be SharePoint nowadays. Maybe Microsoft could try and make it less of a heap.
  - freeone3000 8y ago
    Sharepoint 2017 doesn't have this problem, Sharepoint 2007 does.
    - Mindwipe 8y ago
      Opening a folder from SharePoint in Windows Explorer still requires IE in 2017.
coldtea 8y ago
>So a user might be duped into thinking they are safe when they visit a random site that forces IE mode. IE mode doesn't mean it would have random security exploits or wont run in a sandbox, just means it will support the quirks and legacy behavior required to run legacy enterprise apps based on IE. And of course it will obviously be totally controllable by some enterprise level settings -- what IPs/domains to be enabled on, whether it should be on or off, etc.
kerng 8y ago
This is off by default afaik - it can be whitelisted via group policy in an organization (like already today). Windows environments can be managed pretty well centrally via group policies- it's actually one of the reasons Active Directory is the defacto standard.

javagram 8y ago

If the feature is in fact designed exclusively for businesses, the IE11 mode will only activate on a whitelisted list of sites pushed out via your corporate provisioning process. I believe this is how the feature already works today in Edge anyway, it just opens a new window instead of a new tab.

Mindwipe 8y ago
The biggest offender seems to be SharePoint nowadays. Maybe Microsoft could try and make it less of a heap.
- freeone3000 8y ago
  Sharepoint 2017 doesn't have this problem, Sharepoint 2007 does.
  - Mindwipe 8y ago
    Opening a folder from SharePoint in Windows Explorer still requires IE in 2017.

coldtea 8y ago

>So a user might be duped into thinking they are safe when they visit a random site that forces IE mode. IE mode doesn't mean it would have random security exploits or wont run in a sandbox, just means it will support the quirks and legacy behavior required to run legacy enterprise apps based on IE. And of course it will obviously be totally controllable by some enterprise level settings -- what IPs/domains to be enabled on, whether it should be on or off, etc.

kerng 8y ago

This is off by default afaik - it can be whitelisted via group policy in an organization (like already today). Windows environments can be managed pretty well centrally via group policies- it's actually one of the reasons Active Directory is the defacto standard.