Earlier, the plan was to have no plugin support at all in IE10 Metro. Microsoft is positioning the whitelist approach as a backwards compatibility shim for high-profile sites that won't or can't give up Flash.
IE10 won't run Flash unless website is whitelisted by Microsoft
21–30 of 91 posts
Re: IE10 won't run Flash unless website is whitelisted by Microsoft
#22When we data security advocates discuss things like promiscuous trust among SSL certificate authorities and one-click scary page bypass features with browser vendors, inevitably the old adage comes up "no vendor is willing to lose market share by making its security policies more restrictive than the others".
Perhaps this is a test case trying to break out of the old status quo?
Disclaimer: I recently accepted a position at the big M itself.
Re: IE10 won't run Flash unless website is whitelisted by Microsoft
#23Big question is: will Silverlight run on websites not whitelisted by Microsoft? Otherwise it's a dirty trick.
No, Silverlight doesn't run on IE10 Metro. I just tested that it doesn't run on an arbitrary site, and I don't think it's possible to even whitelist it.
Re: IE10 won't run Flash unless website is whitelisted by Microsoft
#24When we data security advocates discuss things like promiscuous trust among SSL certificate authorities and one-click scary page bypass features with browser vendors, inevitably the old adage comes up "no vendor is willing to lose market share by making its security policies more restrictive than the others". Perhaps this is a test case trying to break out of the old status quo? Disclaimer: I recently accepted a posi…
The iphone/ipad web browsers already don't support flash, so dropping flash support isn't entirely a new thing. I for one am looking forward to its death on more platforms.
Re: IE10 won't run Flash unless website is whitelisted by Microsoft
#25As questionable of a move that is, this kind of excites the 'omg, is flash finally going to die' moment i've been waiting for, for years.
Why is that? Flash seems pretty logical to me. If you were giving the choice to either design with a single language that compiles to bytecode and runs in a vm(jit), or an array of interpretive scripts that's heavily submitted to fragmentation, which would you choose? You'd probably go for the first, as would I.
Flash may be a bad implementation of good idea, but alternatives have not exactly wooed me either. To be quite honest; they all seem equally flawed to me. The fact that jQuery, Bootstrap, and others originated out of overcoming fragmentation pretty much proofs that point. Also different JavaScript engines give you different performances and have different bottlenecks. At least with flash you had the guarantee it would crash the same on all platforms.
Re: IE10 won't run Flash unless website is whitelisted by Microsoft
#26Re: IE10 won't run Flash unless website is whitelisted by Microsoft
#27Earlier, the plan was to have no plugin support at all in IE10 Metro. Microsoft is positioning the whitelist approach as a backwards compatibility shim for high-profile sites that won't or can't give up Flash.
And if this is controlled by group policy, then this allows them to increase security for end consumers whilst allowing business customers the ability to carry on supporting the internal use of Flash that they may (feel that they) require.
Re: IE10 won't run Flash unless website is whitelisted by Microsoft
#28I remember reading this and thinking "nice", back when there were a lot of sites where video couldn't be viewed on an iPhone:
https://www.apple.com/hotnews/thoughts-on-flash/
Two years later, and I can even comfortably disable the Flash plugin in my desktop browser.
It seems (thankfully) that Flash is fast turning into a relic of last decade. Not a bad move by MS.
Re: IE10 won't run Flash unless website is whitelisted by Microsoft
#29Earlier quoted context omitted.
The only thing keeping silverlight alive is Netflix. I wonder why they use it in first place.
DRM, better streaming, C# and the .Net framework
I have to admit though: Netflix's (Silverlight) player is remarkably stable compared to anything I've ever tried in Flash.
Re: IE10 won't run Flash unless website is whitelisted by Microsoft
#30When we data security advocates discuss things like promiscuous trust among SSL certificate authorities and one-click scary page bypass features with browser vendors, inevitably the old adage comes up "no vendor is willing to lose market share by making its security policies more restrictive than the others". Perhaps this is a test case trying to break out of the old status quo? Disclaimer: I recently accepted a posi…
The iphone/ipad web browsers already don't support flash, so dropping flash support isn't entirely a new thing. I for one am looking forward to its death on more platforms.
Hmm. Reading the linked MS document, it sounds more like they're desupporting plugins more for user experience consistency reasons than security or anything else.