When it comes to user privacy, a new report says Microsoft’s flagship Web browser offers the best default features to block user-tracking and third party cookies.
According to a study from NSS Labs, Microsoft Internet Explorer 10 trumps Google Chrome and all other browsers with regard to out-of-the-box privacy configuration, including the way the controversial “Do Not Track” mechanism is implemented.
The Do Not Track header, available in all modern browsers, effectively requests that a web application disable either its tracking or cross-site user tracking of in individual web surfers. According to the NSS Labs study, Microsoft is the only browser that enables Do Not Track by default.
While it acknowledged that the Do Not Track technology does very little to protect privacy, the study found that IE 10 users “will be far better protected by default” than will the users of any other current browser.
While Microsoft has implemented the mechanism by default, rival Google offers the feature but makes it difficult to enable. To turn on Do Not Track in Google Chrome, users must navigate to the Settings menu, go to the Advance Settings before finding the Do Not Track checkbox.
Interestingly, Apple’s Safari browser also received rave reviews in the study, taking the second spot behind IE 10 when it comes to out-of-the-box privacy configurations.
If Safari had a significant market share, NSS Labs argues that Apple’NQ s decision to disable third-party cookies by default would likely have aggravated the advertising industry.
By contrast, the research outfit found that Google and Mozilla (makers of the Firefox browser), “have trailed the industry in providing privacy protections for consumers, with Google even bypassing Safari’s cookie -blocking and incurring a US$22.5 million fine.
NSS Labs also pointed out that Google for circumventing third-party cookie blocking in IE in the past.
While Mozilla Firefox has indicated that it intends to block third-party cookies and enable Do Not Track by default, NSS Labs said the open-source group has yet to implement these changes and now “trails IE and Safari” in the privacy department.
“Google’s Chrome places a distant fourth, not only because of its default configuration and its obscure placement of privacy options, but also because Google’s history of evading privacy protections in other browsers,” according to the report.
The NSS Labs report (download PDF here) also covers the different browser vendors approach to Private Browsing, Geolocation exposure and tracking protection lists.

Ryan Naraine is Editor-at-Large at SecurityWeek and host of the popular Security Conversations podcast series. He is a security community engagement expert who has built programs at major global brands, including Intel Corp., Bishop Fox and GReAT. Ryan is a founding-director of the Security Tinkerers non-profit, an advisor to early-stage entrepreneurs, and a regular speaker at security conferences around the world.
More from Ryan Naraine
- OpenSSL Ships Patch for High-Severity Flaws
- Comcast Wants a Slice of the Enterprise Cybersecurity Business
- VMware Confirms Exploit Code Released for Critical vRealize Logging Vulnerabilities
- Gem Security Gets $11 Million Seed Investment for Cloud Incident Response Platform
- Ransomware Leads to Nantucket Public Schools Shutdown
- Sentra Raises $30 Million for DSPM Technology
- Saviynt Raises $205M; Founder Rejoins as CEO
- OpenVEX Spec Adds Clarity to Supply Chain Vulnerability Warnings
Latest News
- Germany Appoints Central Bank IT Chief to Head Cybersecurity
- OpenSSL Ships Patch for High-Severity Flaws
- Software Supply Chain Security Firm Lineaje Raises $7 Million
- ICS Cybersecurity Firm Opscura Launches With $9.4 Million in Series A Funding
- Vulnerability Provided Access to Toyota Supplier Management Network
- Patch Released for Actively Exploited GoAnywhere MFT Zero-Day
- Linux Variant of Cl0p Ransomware Emerges
- VMware Says No Evidence of Zero-Day Exploitation in ESXiArgs Ransomware Attacks
