Cormac Keogh Microsoft Ireland Vikas Sahni Softedge Systems An Overview of IE8

2 Agenda IE8 for Consumers Security and Privacy Zoom enhancements Performance Search suggestions IE8 for Developers Standards Compliance Compatibility modes Developer Tools Expression Web SuperPreview IE8 for Business Staying in touch with consumers – Web Slices Accelerators Be a search provider - expose your content Build your own IE8 with the IEAK How to use build Web Slices technologies helps to put the user in control over their personal information & privacy. IE 8 allows users to have notice and choice over information that is shared with third-party sites. IE 8 helps to preserve online trust & peace of mind. Feedback, best practices & advice. 2

Internet Explorer 8 Security Security Overview Domain Highlighting SmartScreen™ Filter Data Execution Prevention (DEP) ActiveX Controls Lockdown Cross Site Scripting (XSS) filters XDomainRequest / XDM Privacy & User Control

4 Domain Highlighting Helps to more accurately ascertain the domain of the site they are visiting. The domain is black, vs. other characters which are gray.

5 SmartScreen® Filter Dynamic Anti-Phishing Integration

6 SmartScreen® Filter

7 SmartScreen® Filter Anti-Malware – Download Integration 7

8 SmartScreen® Filter Report a website

9 Data Execution Protection Mitigates many memory-related vulnerabilities by blocking code execution from protected memory.

10 Can it be used? Opt –in Before it can be used (IE7 XP, SP2) Where? Per site Users can restrict where controls run Who? Per User Installs to user account Exploit Controls ActiveX Killbits Pre IE 8 Can be requested by site owner ActiveX Enhancements Security, compatibility & functionality

11 XSS Filter XSS the new buffer overflow Detects Type-1 (reflection) attacks Steal cookies & history Log keystrokes Deface sites Steal credentials (of a sort) Port-scan the Intranet Abuse browser/AX vulnerabilities Evade phishing filters Circumvent HTTPS

12 XSS Filter

13 IE 8 XSS Filter

14

15

16 More Secure Mashups XDomainRequest Enables web developers to more securely communicate between domains Provides a mechanism to establish trust between domains through an explicit acknowledgement of sharing cross domain, and both parties know which sites are sharing information Cross Document Messaging (XDM) Enables two domains to establish a trust relationship to exchange object messages Provides a web developer a more secure mechanism to build cross domain communication applications

17 InPrivate InPrivate Browsing Enables “leave no tracks” locally (cookies, cache & history) Value when using public PCs & shopping for gifts on a shared PC. 17

18 Third Party Content Serving Over time, users’ history and profiles can unknowingly be aggregated Long-standing confusion about “calls” vs. “ tracking cookies” Any third-party content can be used like a tracking cookie There is little end-user notification or control today Syndicated photos, weather, stocks, news articles; local analytics, etc…. Unclear accountability with third party security & privacy policies User Visits Unique Sites Contosa.comTailspin.comWoodgrovebank.com Example.com Farbrican.comSouthridge1-1.comFarbrican.comadventureworks.com Prosware-sol.com 3 rd party Syndicator Web server

19 InPrivate InPrivate Browsing Enables “leave no tracks” locally (cookies, cache & history) Value when using public PCs & shopping for gifts on a shared PC. InPrivate Blocking Helps to put users in control of their info to third-party sites. Assess, on an ongoing basis, user exposure to third-party content. Helps to prevent information disclosure by automatically blocking high- frequency third-party content from sites users visit. 19

InPrivate is On InPrivate Browsing prevents Internet Explorer from storing data about your browsing session. This includes cookies, temporary Internet files, history, and other data. Learn more about InPrivate

28 InPrivate TM Blocking Analyzes third parties content providers who are in a position to aggregate user profiles Enhances choice and control on the sharing of data with third parties

29 InPrivate TM Manual Block Users can exercise choice Allow content being served and possible info disclosure Block content and help prevent info disclosure

30 Agenda IE8 for Consumers Security and Privacy Zoom enhancements Performance Search suggestions IE8 for Developers Standards Compliance Compatibility modes Developer Tools Expression Web SuperPreview IE8 for Business Staying in touch with consumers – Web Slices Accelerators Be a search provider - expose your content Build your own IE8 with the IEAK How to use build Web Slices technologies helps to put the user in control over their personal information & privacy. IE 8 allows users to have notice and choice over information that is shared with third-party sites. IE 8 helps to preserve online trust & peace of mind. Feedback, best practices & advice. 30

Standards Compliance HTML ACID 2 CSS 2.1 CSS 2.1 compliance DOM Improvements HTML Improvements Acid2 Test compliance CSS 2.1 compliance DOM Improvements HTML Improvements Acid2 Test compliance This means Data URI Support Improved Namespace Support And more This means Data URI Support Improved Namespace Support And more

32 CSS 2.1 Compliance Driving Principle is Interoperability Follow the spec to the letter For areas of ambiguity, seek clarification Propose a solution that is in line with the spec Path to CSS 2.1 compliance is not crystal clear Actively contributing our tests – over 3700 so far!

33 A New Layout Engine Users expect their sites to “just work” What do developers want? IE6 Rendering IE7 Rendering IE8 Rendering IE7 and IE8 rendering engine built in How do we give developers what they want? Compatibility Meta Tag or HTTP Header

34 Performance and Memory Connection Limits Increased Broadband: 6 Modem: 2 Configurable via API’s Pre-Parser doesn’t block at script tags JScript Improvements DOM object look ups are much faster Circular referenced objects are garbage collected Faster native Jscript operations Function call performance String methods Array methods Read, write, and deleted Object methods Garbage collection algorithm Communication layer between DOM and JSript

35 New DOM Features Mutable DOM Prototypes Add new methods Add new properties Override default built-in behavior for methods Override default built-in behavior for properties Native JSON Support Faster JSON access Uses JSON2 nomenclature 3 rd party code no longer needed

36

37 DOM Improvements hasAttribute(“attrName”) (on Element) Supports “unspecified” attributes Case comparisons for HTML are case-insensitive Getters/setters behave consistently (return strings) ownerElement, contentDocument, and more getElementById() no longer includes ‘name’d elements Dynamic radio buttons and checkboxes now work properly getAttribute(for/style/class/[boolean]) fixed Boolean attributes properly returned HTML collections fixed Operation Aborted parsing error relegated to script error DataURI

38 AJAX Navigation Feature of HTML 5 AJAX Applications provide “challenges” when users click the back and forward buttons AJAX Navigation allows developers to support back/forward navigation Allows copying & pasting of AJAX URLs! window.location.hash IE fires a window.onhashchanged event IE updates the address back, and back button

39 XDR & XDM Features from HTML 5 Cross Domain Requests (XDR) Cross domain communication is integral to AJAX development XDomainRequest Cross Domain Messaging (XDM) Cross document messaging allows sharing data across frames window.PostMessage()

40 Selectors API Added CSS Selector API from W3C WebAPI WG.querySelectorAll().querySelector() APIs can be called on the document or element 50 times faster than JavaScript tree traversal

41 Developer Tools Tools ship in the box Debugging HTML & CSS View effective styles, Trace styles, View applied rules, View layout, Edit HTML and CSS Debugging JavaScript Execution control, Variable Inspection, Immediate Window Easy rendering engine changing Switch between layout modes without changing the page source

42 Developer Tools JavaScript Profiler One click start/stop of profiler Quickly see where application is spending time Function or Call Tree View Save Edits Notepad like editing & inline editing Add/Change attributes, classes & properties Make changes to HTML, CSS, and save to disk

43 Agenda IE8 for Consumers Security and Privacy Zoom enhancements Performance Search suggestions IE8 for Developers Standards Compliance Compatibility modes Developer Tools Expression Web SuperPreview IE8 for Business Staying in touch with consumers – Web Slices Accelerators Be a search provider - expose your content Build your own IE8 with the IEAK How to use build Web Slices technologies helps to put the user in control over their personal information & privacy. IE 8 allows users to have notice and choice over information that is shared with third-party sites. IE 8 helps to preserve online trust & peace of mind. Feedback, best practices & advice. 43

44 Web Slices Users monitor lots of content on the web Auctions, Weather, Top News, Blogs… Web Slices allow users to subscribe to content directly within a web page Requires a developer to mark up their page with a couple of new CSS classes

45 Web Slice Code Sample Facebook Status Updates Will Mason is going to see Steve Berkoff … Tony Chor had a great night sailing. End … Cyra Richardson Can’t seem to remember …

46 Provides web services with a simple right click Maps, Blogs, , Productivity, Social Networking Quickly drive users back to your site Uses Open Service Format Simple XML file Easy to deploy to users window.external.IsServiceInstalled() window.external.AddService() Accelerators

47 Be a Search Provider

48 Accelerator XML File Map with Live Maps

49 Build your own IE8 - IEAK

50 Next Steps – Try it out Download IE Internet Explorer 8 Blog IEAK

51 © 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

52 For more information Internet Explorer 8 Internet Explorer 8 Blog