

Microsoft points to research by NSS Labs that says IE8 provides the "best protection against socially-engineered malware." Google, of course, touts its own security features, such as a sandboxing method that "helps prevent malware from installing itself on your computer or using what happens in one browser tab to affect what happens in another." This is not a risk we would recommend our friends and families take."


"Given the security issues with plug-ins in general and Google Chrome in particular, Google Chrome Frame running as a plug-in has doubled the attach area for malware and malicious scripts. "With Internet Explorer 8, Microsoft made significant advancements to make the browser faster and safer for our customers," Microsoft said in an email to Network World. Microsoft did not mention IE6 or IE7, although those browsers are out-of-date and Microsoft doesn't recommend using them anyway. In response, Microsoft is accusing Google of increasing the risk of attack by adding to the attack surface of IE8. Google took a shot at Microsoft with the release of Chrome Frame, saying that because of limitations in Internet Explorer, developers are sometimes forced to "limit the functionality of their apps." Google is, in a way, positioning Chrome Frame as an alternative for XP users who can't take advantage of IE9 and who have not made the complete switch to Google's Chrome browser. While Microsoft has made significant improvements in performance with Internet Explorer 9, that browser will only work on Windows 7 and Windows Vista, even though Windows XP is the most widely used OS.
