Besides some great new features including Tabs in MSIE7, Security is at the forefront. Microsoft has release this Free upgrade and it will automatically be selected as a critical update if you do your Windows XP Updates. MSIE7 is not supported in Windows 98 as Windows 98 is no longer supported. Windows 2000 is nearing its end-of-life cycle, no reports yet on MSIE7 compatibility with 2000. In the new Windows Vista, MSIE7 is the default browser.

Some sensationalistic reports of a security flaw immediately followed Internet Explorer 7's final release including one reported in this newsletter, but the vulnerability turned out to be in Outlook Express rather than IE. In fact, Microsoft has put a great deal of effort into making IE 7 more secure. Here are some of the new IE 7 security features and what they can do for you.

Not all readers will fully understand all this information, but please read it and absorb as much as you can. 10 Things you should know about MSIE7 Security.

#1: Default protection from potentially dangerous Active X controls

Active X controls that haven't been checked out and verified as safe no longer run automatically by default; instead they're automatically disabled by the Active X opt-in feature.

#2: Per-zone control of Active X opt-in

You can disable Active X opt-in on a per-zone basis. It's enabled by default on the Internet and Restricted Sites zones for better security and disabled on the Intranet and Trusted Sites zones.

#3: Site and zone locking for Active X controls

Developers can now make their Active X controls more secure by restricting a control to run only on a particular site (site locking) or only in a specific security zone (zone locking).

#4: Protection against phishing

IE 7 introduces the Phishing Filter, which helps protect users from being fooled into entering personal information or passwords that can be collected and used for identity theft. The Phishing Filter automatically checks the Web sites you visit against a list of known phishing sites and issues a warning if the site has been identified as a phishing site. If you prefer not to have sites checked automatically, you can check specific sites when you suspect they might be phishing sites.

#5: Cross-domain security

A attack tactic called cross-domain scripting is prevented by new IE 7 security mechanisms that force scripts to run in the their original security context even if they're redirected to a different security domain.

#6: Locked down security zones

Security zones in IE 7 are locked down tighter than before, with higher default security settings, disabling of the Intranet zone on non-domain computers, and an interface that makes it harder to select low or medium low security.

#7: Better SSL/TLS notification and digital certificate info

Users of IE 7 can more easily determine whether a Web site is secured by SSL/TLS and get information on the digital certificates issued to the site. Sites with high assurance certificates cause the address bar to turn green.

#8: Privacy protection features

Three new registry keys, called Feature Control keys, prevent HTML from getting a user's personal information. In addition, you can easily clear out information you've entered in Web pages, as well as the browser cache (Temporary Internet Files), history, cookies and other personal info, with a single click.

#9: Address bars

All browser windows in IE7 contain address bars, so it's harder for a malicious site to conceal its identity by hiding the URL of the site.

#10: International character alert

IE 7 supports international characters, but to prevent spoofing that exploits the similarity of characters in different languages, the browser warns you that the characters are in another language when international character sets are used.

---

This new Internet Explorer is much more secure and comes highly recommended for both home and business. However we have already found two problems with IE7 and some business critical web applications. You may want to fully test the new IE7 with ALL your business sites including on-line banking, paycheck submissions to the bank and such before upgrading all computers.

The problems we have discovered are both problems with the sites and not with IE7. In both cases the sites have used strange non-industry standard coding or programming to make their own sites more secure. One site has already fixed their problem with IE7.