Is IE really that bad?

[Gary]

One simple answer--YES!

 

[dc2000]

@logicearth: I am not going to engage into polemics with you. If you want to go with Microsoft's definition of sandboxing and ad blocking, then so be it... Just remember me when you get your next malware.

The synopsis of the GRC page is this -- if you have a house with 20 high security doors and then leave your doggie door flapping on the wind -- that place would not be secure, would it? That's the analogy of what they meant about IE's Extended Validation of the Web Site Certificates when they concluded that "it's useless."

@Faladu: I don't hate IE. I just feel for people who use it

 

[logicearth]

The synopsis of the GRC page is this -- if you have a house with 20 high security doors and then leave your doggie door flapping on the wind -- that place would not be secure, would it? That's the analogy of what they meant about IE's Extended Validation of the Web Site Certificates when they concluded that "it's useless."

Which is completely incorrect. Like I said, this "feature" is only there for corporate environments that run INTRANET web sites which issue their own certificates. They are already their own Root CA so why shouldn't it be trusted? Its not a "dog door flagging in the wind", it all comes down to NOT understanding what is it for. And how much work it actually is to do put EV status on a self-signed certificate. You cannot do this just on any old certificate.

Like a said earlier which you keep disregarding. IT DOES NOT EFFECT THE INTERNET OR CONSUMERS. Only Intranets.