Browsers

The Mozilla Firefox 20.0 standards compliant browser showing NCF's Zimbra webmail

The Google Chrome 26 standards compliant browser showing NCF's Zimbra webmail

The Gnome Epiphany 3.4.1 standards compliant browser showing NCF's Zimbra webmail

Internet web pages are usually designed to conform to internationally accepted standards set by the World Wide Web Consortium (W3C). As long as the web page you are viewing is standards compliant and you use a browser that is also standards compliant, then the page will render the way it is supposed to.

These days all operating systems come with web browsers installed, but some are better than others.

Linux and BSD-based operating systems often come with Firefox or Chromium, which are excellent browsers and both standards compliant. Android based systems, which are also Linux, often come with Google Chrome, which is also a very good and standards compliant browser.

Apple products, including iPads and iPhones, usually come with Safari, which is a good standards compliant browser as well.

You can note that the Zimbra web mail interface looks the same in the three standards compliant browsers illustrated on the right, which is the way it should work!

Internet Explorer

Microsoft Windows systems come with Internet Explorer (IE), which is a browser that has a long history of issues and has generally not been standards compliant. Later versions of IE, like IE9, IE10 and IE11 are supposed to be standards compliant, but testing shows that they do not render standards compliant web pages, like NCF's Zimbra web mail pages, properly, which can cause problems. As a result Internet Explorer is not recommended.

Development of Internet Explorer was discontinued by Microsoft and version 11 will be the last version. IE 11 is still receiving security updates as of December 2016, but is still not recommended for use.

In extensive testing of IE10 with Zimbra 7 in May 2013 NCF's system administrator reported:

IE10... behaviour is inconsistent.

The first time I opened up Zimbra, it loaded up totally fine. Granted I did get a mystery error pop-up about a zimlet that couldn't load, but that's survivable.

Afterwards, it was giving me trouble, and I couldn't get it to load at all, and then it loaded with text-only (basically gibberish), and then I got it to load again.

The compose/reply buttons don't work. Unlike some of those that have complained, I'm more insistent on things working, so I tried a bit harder!

I found if I double-click on a message to load it in a separate menu, then I can get the reply to work...There's no telling with this thing, clearly IE10 can't be safely used with Zimbra right now.

NCF members have reported problems with IE11 and Zimbra 7 as well, not rendering page menus correctly and other similar issues. According to member reports Zimbra 8 seems to work better with IE11 although it may be necessary to add https://mail.ncf.ca to "trusted sites" and also add it in Tools→Compatibility View as well.

February 2014 compromise of Internet Explorer 10 and earlier

On 14 February 2014 Carnegie Mellon University in conjunction with the US Department of Homeland Security published a report that showed that IE10 and earlier versions had been compromised by a flaw in the browser design in combination with the Adobe Flash Player. Just viewing a website allows the browser to execute arbitrary code allowing the attacker to gain control of your computer. The report included the fact that the exploit code was publicly available and that it was being actively taken advantage of through a large number of attack websites.

Because these are older, unsupported versions, they will not have patches issued and thus can no longer be used. If you are using IE10 or earlier either upgrade to IE11 immediately or switch to using a different browser to protect your computer from being compromised.

Note that Windows XP users cannot install a newer version of Internet Explorer than IE8 and so must switch to an alternate browser.

April 2014 compromise of all versions of Internet Explorer

In April 2014 the US Department of Homeland Security advised people to not use Internet Explorer, due to a security flaw that compromised all versions of the browser:

• Internet Explorer bug used by hackers to attack U.S. firms - Malicious Operation Clandestine Fox campaign targets U.S. defence, financial firms - CBC

Microsoft Edge

Microsoft Edge is Microsoft’s default browser for Windows 10 and replaces Internet Explorer. It can only be used on Windows 10 and cannot be used on Windows 7, 8, or 8.1. A number of improvements over Internet Explorer 11 (IE 11) have been made in it. They include:

• faster page loading speed
• smooth scrolling
• support for add-ons
• smooth video streaming
• Less memory use compared to Chrome

Old browsers

Internet standards change over time and browsers are updated regularly. Using older, outdated versions of web browsers is not recommended for several reasons:

• newer versions usually have fixed identified security issues, meaning that by using older browser versions you could compromise your computer
• newer browser versions incorporate newer features that show modern web pages properly. For instance older browsers will not support modern HTML5 or Ajax, which makes modern interactive sites, like Zimbra work.

Use the most up to date version of your favourite browser, that way web pages will work right and you will be more confident that old security vulnerabilities have been addressed.

Getting a new browser

Rather than use IE, NCF recommends that you use other alternate, standards compliant browsers, all of which are available for free, such as:

• Apple Safari for macOS
• Brave for Linux, macOS, and Windows
• Chromium for BSD and Linux
• Gnome Web (formerly called "Epiphany") for Linux
• Google Chrome for BSD, Linux, macOS, and Windows
• Midori for BSD, Linux and Windows
• Mozilla Firefox for BSD, Linux, macOS, and Windows
• Mozilla SeaMonkey for BSD, Linux, macOS, and Windows
• SRWare Iron for BSD, Linux, macOS, and Windows
• Vivaldi for Linux, macOS, and Windows

Safer browsing

Most of these listed browsers have add-ons available to make internet use safer. Some browsers, like Web (Epiphany), include features like ad-blocking natively, without add-ons.

The use of Adblock Plus and Ghostery will greatly reduce the number of opportunities to download malware and so installing these two add-ons is highly recommended. Find them at:

• Adblock-Plus will result in faster page loads, almost no advertising and the blocking of malicious javascript code.
• Ghostery blocks a lot of tracking and spyware, but may cause some websites to not work right.

Other good extensions are:

• uBlock Origin a wide-spectrum blocking extension which refuses many elements, including ads that track you, improving privacy on Firefox, Edge, Chromium and Chrome

• Privacy Badger from the Electronic Frontier Foundation which refuses tracking cookies, scripts and images, including ads that track you, improving privacy on Firefox, Opera, Chromium and Chrome

• HTTPS Everywhere, also from the Electronic Frontier Foundation, causes websites to use encryption wherever possible to improve privacy. For Firefox and Chrome.

• Self-Destructing Cookies is a Firefox add-on that removes cookies as soon as you close the tab, reducing tracking.

Users should be careful of adding other browser add-ons, especially for Chrome, as some of these are malware themselves. Stick to browser add-ons that have been recommended by reliable sources.

See also

• Managing your monthly DSL bandwidth usage

External links

• Proprietary Software Is Often Malware
• Test your version of Adobe Flash
• Test your browser for HTML5 compatibility
• The Best Browser Extensions that Protect Your Privacy
• Privacy Tools
• You say advertising, I say block that malware on Engadget
• 10 Ad Blocking Extensions Tested for Best Performance