Google Chrome Frame plug-in although helps to increase IE’s speed but Microsoft recommends to their users not to go for Chrome Frame Plug-in as this would increase their woes of security.
Chrome Frame Plug-in is a new open source plug-in that injects Chrome’s WebKit rendering and V8 JavaScript engine into Microsoft’s browser. Plug-in was formed by Google for IE keeping in mind need for high speed for IE users while using advanced web applications like GoogleWave – the multiplatform communication tool. Also the plug-in is essential for web developers who want to support standards IE cannot handle such as HTML 5.
Redmonds Microsoft statements:
Company’s general manager for IE Amy Bazdukas warned regarding the security issues on plug-in in general and Chrome Frame in particular that running a browser within a browser doubles the attack area for malware and malicious scripts.
Other harmful effects as informed by Microsoft includes :
Using Chrome Frame breaks the privacy model of IE thus removing unknowingly all the private browsing protection that Microsoft built into its newest browser.
IE’s browser history deletion feature is crippled by Chrome Frame.
“Chrome Frame breaks the privacy model of IE,” she claimed. “Users are not going to be able to use IE’s privacy features, something that’s not made apparent to users. They’re essentially circumvented.”
Google’s statements in defense:
Google supports its Frame plug-in by picturing better performance, strong security, and increased choice to both developers and users, across all versions of Internet Explorer.
Google spokesman highlighted that Chrome Frame brings:
It brings Strong phishing and malware protection to IE which are absent in IE6.
Its robust sandboxing technology [in IE6 and on Windows XP],
It defenses from emerging online threats that are available in days rather than months.”
They supported the point by explaining that although both IE7 and IE8 include a “sandbox” defense dubbed “Protected Mode,” the feature works only when the browsers are run in Vista (IE7 and IE8) or Windows 7 (IE8). Google’s Chrome Frame, however, prevents malicious code from escaping the browser. Another advantage includes the Chrome Frame ability to receive automatic, behind-the-scenes security updates with the same mechanism used by the Chrome browser itself, relieving users of manually patching the plug-in.
Although Chrome Frame boost up IE’s speed nearly 10 times faster but yet Microsoft is not ready to take that pie in. They say it’s regarding security issues but may be they finds Google is trying to yield from IE’s position as the world’s leading browser. “Google hasn’t been able to make an impact on market share with Chrome,” said Bazdukas, “and so they’ve turned to alternate means. Chrome Frame would look to capitalize on the leadership position that we have.”
A comparison of different browser speeds this week showed the new Chrome 3.0 browser was faster than rivals IE8, Firefox 3.5, Opera Software’s Opera 10 and Apple’s Safari 4.0.
The Chrome Frame plug-in works with IE6, IE7 and IE8 on Windows XP and Windows Vista. It’s available from Google’s site as a free download (
http://code.google.com/chrome/chromeframe/)
source:whitehatfirm
