Security Zones and ActiveX Controls
As you probably know, IE lets you configure its various security zones so that they have different security settings, then places Web sites in the zones you select. For example, IE contains a My Computer zone that gives more access to the underlying OS to Web sites that are members of that zone. Unlike IE, Firefox doesn't use zones to control how the browser treats Web site content. Aside from customized per-site settings (e.g., cookies, extensions, pop-ups), Firefox handles each site with the same general security settings. So, from IE's perspective, Firefox essentially has only one security zone.
The single-zone technique seems to work well. Because Firefox isn't integrated directly with the underlying OS, it doesn't need more than one security zone and doesn't present nearly as much risk as IE does when handling Web content. You can use Firefox to navigate your hard disks, but for Web-based content Firefox renders HTML, Java, and Javascript applications. Therefore, intruders can't exploit your system unless one of those technologies has a bug.
Firefox doesn't have native support for ActiveX or VBScript. The benefit of this strategy is that malicious ActiveX controls and Visual Basic (VB) scripts won't run in Firefox. The disadvantage is that if you need to use ActiveX controls or VBScript, you have to use IE for those instances, a setup you can easily facilitate by using the IE View Firefox extension, which is available in the Firefox extensions repository on the Mozilla Web site.
For typical Web use, that limitation should present only minor, infrequent problems. The majority of public Web sites are designed to work with any Web browser that comes close to supporting official Web standards, and popular Web-based plug-ins (from large companies such as Adobe Systems, Apple, Macromedia, and RealNetworks) are designed to work with Firefox as well as IE and other Web browsers.
Security Updates
Another benefit of Firefox is that it isn't targeted for attacks nearly as often as IE is. And although Firefox's obscurity doesn't provide a tremendous amount of security, it does provide some measure of safety.
When the Mozilla Organization discovers security problems in Firefox, it addresses them much more quickly than Microsoft fixes IE flaws. Installing Firefox patches is quick and painless because Firefox is a small download and has a built-in software update and packaging feature. Selecting Tools, Options, Advanced displays a dialog box that presents a list of options. Under the Software Update option, you can enable Firefox to periodically check for updates to the browser and for updates to extensions and themes that you've installed. You can also click Check Now to immediately check for updates. But you can't configure how often Firefox checks for updates, and the documentation doesn't offer any information about the interval.
When update checking is enabled and an update is available, Firefox displays a red circular icon with an arrow directly under the Minimize, Maximize, and Close buttons, as Figure 6 shows. When you click the icon, Firefox immediately begins downloading and installing the software update.
Privacy Features
Firefox has several useful privacy features. People often complain about cookies, which are sometimes used to track their Web use. Firefox offers fine-grain control over cookies. You can configure Firefox to allow a Web site to set cookies, then ask you whether to allow the cookies. Whenever it receives a cookie, the browser displays a dialog box, which you can use to decline the cookie, accept it, or accept it only for that particular Web session. You can also tell Firefox to remember your choice for all future visits to that Web site so that you don't have to deal with the same dialog box every time you visit the site. By denying cookies from some sites and accepting them from sites you need to visit (such as merchant sites) and by allowing session cookies only from sites you visit rarely, you can minimize the opportunities to track your Web use.
Firefox remembers form field data that you enter for a given Web page, so you don't have to reenter it every time you visit. It also has a password manager that remembers logon details for sites that require secure access and uses strong encryption to store passwords. The password manager uses a master password to prevent other people from gaining access to your logon credentials. The first time you use the password manager, you have to create your master password; from then on, access to stored passwords is transparent.
Firefox has a download manager that remembers which files you've downloaded and compiles a list of files you've downloaded that you can erase manually or automatically after you finish downloading a file or when you close Firefox. The browser also lets you control Web caching and the history of sites you've visited.
A new Firefox feature is built-in support for Web-based news feeds that use the Atom and Really Simple Syndication (RSS) standards. The news feeds feature works in conjunction with bookmarks. When you visit a Web site that offers an Atom or RSS feed, Firefox displays an icon on the bottom right of the status bar. When you click the icon, Firefox adds the news feed to your bookmarks as a top-level entry and automatically updates the list of the most recent articles as subentries under that top-level entry for quick and easy access.
Compelling Features
I've given you a brief overview of many of Firefox's security and privacy features, but the browser has other compelling features you might find useful. For example, Firefox offers tabbed browsing windows, a new search bar at the bottom of the screen (which appears when you press Ctrl+F), the ability to highlight search terms on any Web page, and a quick-search feature that locates text on a Web page as you enter a matching word or phrase. Firefox also has an incredibly small installation footprint that you can customize with third-party themes or your own themes, an open extension programming interface, more than 160 ready-to-use extensions, numerous custom search engine plug-ins, custom tool bars for Yahoo! and other services, and much more than I have room to list. If you're even slightly curious about Firefox, download a copy and take it for a test drive. You'll find its feature set worth considering, especially if you can't upgrade to the latest version of Windows. You can download Firefox from http://www.getfirefox.com.