What Security Features
does Internet Explorer Have?
Internet Explorer is a safe browser in many ways. The
latest version of IE supports Secure Socket Layer (SSL) 2.0/3.0, Private
Communication Technology (PCT) 1.0, CryptoAPI, and VeriSign certificates, and
one version employs 128-bit encryption, one of the strongest forms of encryption
that's commercially available for use over the Internet. To see if you have the
128-bit version of Internet Explorer, go to the
Wells
Fargo Bank site and take their browser test.
"Secure Socket Layer (SSL) is a Netscape-developed protocol submitted to
the W3C working group on security for consideration as a standard security
approach for World Wide Web browsers and servers on the Internet. SSL provides a
security "handshake" that is used to initiate the TCP/IP connection.
This handshake results in the client and server agreeing on the level of
security they will use and fulfills any authentication requirements for the
connection. Thereafter, SSL's only role is to encrypt and decrypt the byte
stream of the application protocol being used (for example, HTTP). This means
that all the information in both the HTTP request and the HTTP response are
fully encrypted, including the URL the client is requesting, any submitted form
contents (such as credit card numbers), any HTTP access authorization
information (usernames and passwords), and all the data returned from the server
to the client." --
Microsoft's
IIS 1.0 Features Tour. It has been reported, however, that SSL has been
cracked.
Private Communication Technology (PCT) is a Microsoft-developed security
protocol available in IE only. According to their
Internet
draft, "The Private Communication Technology (PCT) protocol is designed
to provide privacy between two communicating applications (a client and a
server), and to authenticate the server and (optionally) the client. PCT assumes
a reliable transport protocol (e.g., TCP) for data transmission and reception.
The PCT protocol is application protocol-independent. A "higher level"
application protocol (e.g., HTTP, FTP, TELNET, etc.) can layer on top of the PCT
protocol transparently. The PCT protocol begins with a handshake phase that
negotiates an encryption algorithm and (symmetric) session key as well as
authenticating a server to the client (and, optionally, vice versa), based on
certified asymmetric public keys. Once transmission of application protocol data
begins, all data is encrypted using the session key negotiated during the
handshake."
IE also supports server and client authentication by using digital certificates
to identify users to web servers. In addition, IE supports code signing with
Authenticode, which verifies that downloaded code has not been modified. For
more information on Authenticode, visit Microsoft's
Authenticode
page or the excellent
Authenticode
FAQ page.
CryptoAPI 1.0 provides the underlying security services for the Microsoft
Internet Security Framework. CryptoAPI allows developers to integrate
cryptography into their applications.
Microsoft has given a great deal of
thought to the issue of security and it products, and Internet Explorer 4.0 is
no exception. From
"Security
Zones" to continued support and refinement of
Authenticode,
IE4 promises to be one of the safest browsers of all time. You can read
all about the security available in IE 4 at
http://www.microsoft.com/ie/ie40/?/ie/ie40/features/ie-security.htm.
Also, check out what Microsoft is doing to keep
transactions
private with IE 4.
Becca B on 22 Feb 11"1- Be friendly, positive and self-reflective. When people cannot see you, and also do not know you, feelings can be hurt if you are not careful in how you express yourself. The old saying, think before you speak is important here. Think before you write. One word of advice is do not respond when you feel angry. Wait. Write it down somewhere and come back to it. When you do, you may find that you no longer feel the same way as you did when you wrote it, because you have had time to reflect about the situation. Last, if you still feel the need to be heard, then edit before you post, and write it in terms that are easily embraced. This is also true when you feel a critique is necessary, say it in a positive tone. Reread what you have written to be sure it is positive. 2- Use proper language and titles. Do not use slang or even profane words in an online education environment, even if they are words you consider, "not so bad," as they will sound offensive to the reader. Do not refer to your professor as "Doc" or by his or her first name, unless it is acceptable with him or her to do so. Also, do not use caps lock when writing. It will insinuate yelling. That would hurt someone's feelings and possibly give him or her the wrong impression of you. 3- Use effective communication. This takes practice and thoughtful writing. Try to speak and write clearly at all times. Again, reread before you respond. Define and restate your words when necessary. Correct a misunderstanding right away. Chances are, if one person felt a certain way about what you said, then another may have as well. Likewise, be mindful of chosen words and joking. Let's say for example, I write, "get out!" This slang term can be interpreted in several ways, either positively or negatively. 4- Professionalism. Leave the characters like smiley faces, and instant message abbreviations out. Your friends may like it, but chances are, your professor will not. Save it for personal conversations or definitely ask
