There is a good bit you can do to tighten the security of your browser
by setting various Preferences. Here are my recommended Preference settings
for several browsers:
Firefox is the latest browser from the Mozilla Organization. It's ready to use "out of the box" but it also is very extendable - see Tools > Add-ons > Get Add-ons > Search to download various applets.
Here are some key Options for Firefox:
Open the Options dialog by clicking the Tools and Options menu items.
Then set the following [X means check, _ means do not check; Red=Security, Green=Goodie]:
Privacy
Download Manager History
Remove Files: When Firefox exits (If you don't set this, your downloads will take longer and longer)
Cookies
X for the originating web site only
Web Features
X Block Popup Windows _ Enable Java X Enable Javascript
Netscape is now obsolete. Do yourself a favor
and upgrade to Mozilla or Firefox.
Mozilla version 1.7 and Firefox 1.0 seem very stable.
If you decide to stick with Netscape, the
settings for Mozilla mostly apply to NS 6.x and 7.x.
Whatever version of Netscape you use, you must turn off Java and Javascript
in Mail & News; and for NS 6x and 7.x turn off Plug-ins for Mail & News.
Open the Preference dialog box by clicking the Edit and Preferences menu items.
Then set the following [X means check, _ means do not check; Red=Security, Green=Goodie]:
Appearance
Text Only [more vertical real estate!]
Navigator
Internet Search
Search using Google
Tabbed Browsing X Hide the tab bar when only one tab is open
_ Load links in the background [you might want this on if you have a fast connection]
_ Middle or Control Click Open Tabs [interferes with PopupStopper] X Control+Enter in the Location Bar
Downloads X Open a progress dialog
Mail & Newsgroups
_ When Mail launches, show the start page
Send Format X Ask me
Privacy & Security
Cookies
X Enable cookies for the originating web site only
X Disable cookies in Mail & Newsgroups (if this choice is available)
Popup Windows
X Block unrequested popup windows
X Play a sound
X Display an icon
Advanced
_ Enable Java
Scripts & Plugins X Enable Javascript for Navigator
_ Enable Javascript for Mail & Newsgroups
_ Move or resize windows
_ Raise or lower windows
_ Hide status bar
_ Change status bar text
_ Change images
_ Disable or replace context menus
_ Enable Plug-ins for Mail & Newsgroups
Software Installation X Enable software installation [needed to install spell checker] X Check for updates
There are a number of additional preferences in the Edit > Preferences dialog box.
You can also edit your prefs.js file to change additional preferences.
This information is current for IE 6.x - other version are quite similar, but
the names of the settings may be different.
You are going to need to create custom levels for the 3 of the 4 Security
Zones. To start, click the Tools and Internet Options menu items to bring
up the Preferences dialog box. Click the Security tab. You will see 4 icons
near the top of the dialog box.
Click the icon, click Custom Level, and make
your setting look like this.
You might have already done this step when
restricting scripting in MS Outlook Express.
This disables Java, Javascript and Active-X for sites that you add to the
Restricted Zone. Click the Sites button and add URLs from sites that have
lots of popups, are non-commercial, that you visit but don't really trust, etc.
To be really safe, don't run Active-X without being prompted.
Click the icon, click Custom Level, and
make your setting look like this.
If you follow step #2 above, there are some sites where you will have to allow Active-X, and if you
don't, the prompting will drive you crazy and they still might not work.
Click the icon, click the Custom Level,
and change the following:
Disable "Download unsigned Active-X controls"
Disable "Initialize and script Active-X controls not marked as safe
High Safety "Java Permissions"
Prompt "Display mixed content"
High Safety "Software channel permissions"
Click the OK button.
Click the Sites button and un-check the checkbox at the bottom of the Sites
dialog box that requires https: for all sites in this zone.
Now enter the sites your trust (or are forced to trust).