Windows 10: Microsoft Edge is getting new security improvements on Windows 10

Microsoft is working on two new security features for Chromium Edge – Automatic HTTPS and Windows Hello authentication for saved passwords.

Currently, when you type URLs into the address bar, Edge attempts to open the insecure HTTP version of the website before redirecting users to the HTTPS (if available). Starting with version 92, Microsoft Edge will automatically connect to the HTTPS versions of URLs when you type into the address bar.

Initially, Edge’s Automatic HTTPS feature will be optional and users can configure it by navigating to the Settings. Once enabled, Microsoft’s HTTPS-only rule mode will upgrade HTTP connections to HTTPS, which means the browser will first attempt to connect to the HTTPS URL.



If you don’t see the option, you can also enable it using the “Automatic HTTPS” flag.

The downside to HTTPS-only mode is that it may break websites and result in HTTP errors if the website is still using the insecure protocol. If the site doesn’t support secure protocol, Edge will try to connect to the HTTP version after a few failed attempts.

Google has also enabled support for HTTPS-only mode in Chrome to improve the performance and security of the browser.

Windows Hello integration in Microsoft Edge


Like Google Chrome or Firefox, Microsoft Edge can also access and autofill your passwords synced to the Microsoft account.

Microsoft’s password manager makes it easy to log in to websites like Twitter or Reddit by auto-filling the username and passwords. You can also manage and edit your passwords from the browser’s settings page.

To improve the security and privacy of users, Microsoft recently started testing support for Windows Hello in Edge Canary. The feature is now available for everyone on the Dev Channel and users can enable it to improve the security of the autofill feature.



To test this feature, open Microsoft Edge Dev or Canary and navigate to Settings > Profile > Passwords. Enable the option “required authentication” to force Windows Hello authentication each time you try to sign in using the saved passwords.

As you can see in the above screenshot, Microsoft Edge currently offers three options:

• Always – This will require authentication each time you try to sign in.
• Once every minute.
• Once every session.

It’s important to remember that Windows Hello doesn’t always require special hardware for Micorosft Edge. You can use methods such as PIN, fingerprint or iris scan to authenticate Edge’s password manager.



Once configured, a security prompt will appear every time when you attempt to use one of the saved passwords.

In addition, Microsoft Edge is also getting support for Office Viewer, Windows Search integration and more in the next big update.

The post Microsoft Edge is getting new security improvements on Windows 10 appeared first on Windows Latest

Weiterlesen...

 

Improvements for Enterprises in Microsoft Edge on the Windows 10 CU

Source: Improvements for Enterprises in Microsoft Edge on the Windows 10 Creators Update - Microsoft Edge Dev Blog

 

Microsoft Edge TLS Security

After trying everything (not a lot of steps) listed in the Microsoft Edge support site, I did a wider search and found this very simple youtube video that fixed it immediately:

For those who prefer not to click links the steps are simple:

1. Click in the Cortana search bar next to the Win 10 Start button

2. Type internet options

3. Select internet options (control panel) from the list

4. Click on the advanced tab

5. Scroll down to the security section

6. Make sure the following are all clicked:
Use SSL 3.0
Use TLS 1.0
Use TLS 1.1
Use TLS 1.2

7. Click apply

8. Refresh the page that was giving the error and it should now connect.

Hope this helps, it was a 30 second fix after hours of pounding my head against the error with the Support site suggestions.

 

Microsoft is developing a built-in ad blocker for its Edge browser

"One of the first browser add-ons many people install to improve their online experience is Adblock Plus or something similar. Until recently, Microsoft Edge's lack of support for add-ons put off a lot of would-be users, but reports from Build 2016 suggest that native ad blocking is on its way to the Internet Explorer successor.

Adblock Plus is coming to Edge, but built-in ad blocking would negate the need for such an add-on. A slide shown off and snapped at a Build presentation shows that the next version of Edge, in response to user feedback, will feature ad blocking capabilities. There's no word on delivery timescale, but the upcoming Windows 10 Anniversary Update would seem a likely candidate.

ZDNet's Ed Bott photographed the slide which shows Microsoft's development roadmap built around feedback from testers. Right at the top of the list is reference to plans to create a plugin and extension store for Edge, but it's entry number four that's more intriguing.

"Build ad blocking features into the browser" is listed as a Feature Request from users. But the good news is that it is not only listed as being "Deliverable 4682811", but as "Targeted for the next version".

This will no doubt come as good news for those who have fallen in love with Edge, but it's not something that will be welcomed by the likes of Adblock Plus. It does seem that, particularly in the mobile arena, there is a move to baking ad blocking into the browser so it makes sense that Microsoft is following the trend. But it is the fact that Edge straddles Windows 10 on the desktop and Windows 10 Mobile that makes this a particularly interesting move.

Keep an eye out for Insider builds in the coming weeks as the feature may be just around the corner."

Forget extensions, built-in ad blocking is coming to Microsoft Edge - [UPDATE... no it's not!]