Thoughts on Internet Explorer 7

Microsoft has released Internet Explorer 7 but only for Windows XP SP2 users. If you are running a previous version of Microsoft Windows, you´ll need to upgrade to Windows XP SP2 first. A slightly more secure version of Internet Explorer 7 will be released in January 2007 with the Windows Vista operating system.


Notable among the new features within IE 7 for Windows XP are a redesigned interface, tabbed browsing, a built-in RSS feed reader, and a new Favorites Center. Despite nearly two and half years of development, the new browser falls short of complying with Web standards and of matching features found in competing browsers, and despite an aggressive marketing campaign to the contrary, IE 7 is not that much more secure that IE 6, in part because of its reuse of old IE 6 code and a crippling legacy that Microsoft is slow to patch existing IE flaws.

Internet Explorer 7 for Windows XP SP2 can be downloaded for free from the CNET site. As of November 2007, users of Windows XP SP2 will automatically receive a Windows Update notice that Internet Explorer 7 is available. Enterprises may, however, block the automatic downloads of IE 7 until corporate IT staff has evaluated the new version. In a workplace, check with your system admin before installing IE 7 on your office desktop.

Installation for IE 7 includes two unusual requests. One, Microsoft asks that users briefly disable antivirus protection. Microsoft claims that there have been some conflicts between IE 7 installations and some antivirus engines, so to err on the safe side, the software giant asks that you disable your antivirus protection until the installation is complete. Neither Mozilla Firefox nor Opera make this request. Microsoft uses its own malicious-software removal tool during the installation of IE 7, and it is perhaps this tool that conflicts with some antivirus apps.

The other unusual request is that Microsoft asks users to reboot their computer after installation. Neither Opera nor Mozilla Firefox require a reboot. Unique to Internet Explorer 7 is an RSS feed engine that renders Web feeds as a readable page, and a reboot installs this engine in the system kernel. For the most part, we like the built-in RSS reader feature. Opera includes a newsgroups-like RSS reader, while Firefox allows you to associate RSS feeds with third-party readers.

After the installation reboot, Internet Explorer 7 displays a first-run screen where you can turn on antiphishing (not enabled by default) and select your default language. After that, you´re finally ready to begin.

Longtime IE 6 users will react differently to the redesigned toolbar – some will like it, most will not. Microsoft claims users wanted the buttons and bars rearranged; in doing so, Microsoft deviates from the other popular Internet browsers on the market today. The back and forward buttons haven´t moved; they´re now compressed into the upper-left corner, and their individual drop-down menus have merged into one drop-down list. The address bar is now at the very top of the browser so that malicious spyware toolbars can´t obscure or hijack it. Unfortunately, Microsoft has chosen the address bar to also display antiphishing and site certificate information, making it sometimes a very busy place. Perhaps the worst new placement is the refresh button, which is now located immediately after the address bar. Even after using the beta for a few months, we still find it hard to remember where the refresh button is located.

Like Mozilla Firefox and Opera, IE 7 has a built-in Internet search box in the top tier of the interface. If you install Internet Explorer on a clean system, the search box defaults to the little-used Windows site; however, if you upgrade and you already have a preference for, say,, Internet Explorer will respect your wishes and ask whether you want to continue using Google as your default search engine. If, on a clean system, you wish to change your preference from Windows to, IE 7 takes you to a search engine page where you can add additional search engines (oddly, Google is one of a limited few sites that do not include colorful logos, so look hard). Once it´s added, you must still click to make Google your default, but the process is relatively painless. Unlike Firefox, IE 7 does not display search suggestions from your chosen search engine.

On the second tier of the redesigned IE 7 interface, in the upper left, Microsoft places its Favorites Center, accessible via the familiar star icon and a new Add to Favorites star icon. The Favorites Center replaces the Favorites sidebar and includes tabs for RSS feeds and History. Next to the Favorites Center is the Tabbed Browsing section (see below for more), followed by the relocated Command Bar, which includes Homepage, RSS, Printer, Page, and Tools, with the latter being an omnibus drop-down menu of settings and enhancements.

Should you decide to remove Internet Explorer 7, you will return to Internet Explorer 6. You can´t completely remove Internet Explorer–not without considerable effort. Because Microsoft has thoroughly bundled the Internet browser within its Windows operating system (surfacing, for example, whenever you need to view an HTML document within Microsoft Word), we do not recommend removing Internet Explorer entirely.

Perhaps the biggest change within IE 7, aside from the overall interface redesign, is tabbed browsing, a feature already found within Firefox and Opera. Tabbed browsing allows you to open, view, and close multiple pages within one IE 7 session. The tabs, which can be reordered, can also be previewed on a page with clickable thumbnail displays of each open tab. We prefer Opera, which provides native thumbnail views as your mouse hovers over each tab. The page preview available within IE 7, called Quick Tabs, requires an extra mouse click, which is an annoyance for the ergonomically minded.

Speaking of accessibility features, IE 7 includes zoom technology and the new Clear-type page technology, which Microsoft claims renders page fonts as sharp and clear as those printed on a piece of paper. We find the IE 7 page zoom a bit clunky compared with that of Opera, which uses the scroll button on your mouse; Microsoft uses hot keys, preset sizes, and an option to render at a custom size. Even if you zoom to the maximum level, 400 percent, we found that the Clear-text technology within IE 7 remains quite clear with fonts, although art and photos do become pixilated.

Printing within IE 7 has also been enhanced; like Mozilla Firefox, pages within IE 7 now automatically shrink to fit on the printed page, sometimes resulting in microprinted text. You should always preview the page first so that you can also customize the shrink if needed.

Like Firefox, Internet Explorer has various add-ons; however, Microsoft can´t match the large international community of developers that Mozilla enjoys.

RSS isn´t treated lightly within IE7; in fact, Microsoft built an entire RSS reader and bundled it in with the browser. Now when you click on the RSS button, you´ll see a listing of the feeds provided by a given Web site. Click the feed you want, and IE7 displays the latest headlines and blurbs. Unlike IE6, the page is readable (no more XML gibberish), with links to subscribe and to update the current feed.

Security enhancements within IE 7 for Windows XP SP2 include increased malware protection by requiring you to opt-in when using ActiveX components (previously, ActiveX components installed automatically unless you changed the Internet options settings), along with an increased default Internet security level (medium-high), a new layer of certificate authentication, and antiphishing technology. Microsoft has added security protection to its new RSS reader as well, accepting only valid RSS feeds and not malware. There are also built-in code protections against Cross-Domain script attacks and malicious URL handling. However, much of the code used to create IE 7 has essentially remained unchanged from that of IE 6, so many of the non-ActiveX flaws now being discovered within IE 6 will likely affect IE 7. Given that Microsoft fixes only between one and five Internet Explorer flaws each month, we do not find IE 7 to be substantially more secure than IE 6. Further security protection, such as the sandboxing of all Internet Explorer sessions, will be offered within the Windows Vista version of Internet Explorer 7.

Also unchanged within IE 7 is the underlying rendering engine; IE 7 still uses essentially the IE 4 Web engine. So in terms of page performance, Mozilla Firefox, which updated its Web engine with Firefox 1.5, remains the much faster browser.

Speaking of rendering, IE 7 offers Clear-type text enhancements but still does not offer full Cascading Style Sheet 2.1 (CSS 2.1) standards compatibility and has spotty support of XHTML 1.1, HTML 4.01, WML 2.0, ECMAScript, DOM 2, and SVG 1.1–standards supported by the W3C organization. Thus, IE 7 fails what is called the Acid2 Test, a test designed by the Web Standards Project to demonstrate complete standards compliance. So far, among the browsers reviewed by CNET, only Opera has passed the latest Acid2 test, with Mozilla Firefox expected to comply shortly. As Web designers adopt these standards, some sites may begin break as IE 7 falls farther behind the standard used by Web designers worldwide.

IE 7 includes Microsoft´s new antiphishing technology, designed to prevent users from providing personal data to fraudulent Web sites. Microsoft has touted its new technology (partnering with security vendors Cyveillance, InternetIdentity, MarkMonitor, and RSA Security´s Cyota) as superior to others, yet in our own admittedly limited tests, we found that IE 7 consistently failed to catch phishing sites less than 1 hour old, although IE 7 caught all phishing sites known for at least 1 hour or more. Most phishing sites are removed after their initial 72 hours. We found that stand-alone antiphishing filters, such as that from Netcraft, performed far better than IE 7 in flagging brand-new phishing sites. Microsoft says it is constantly updating its antiphishing technology and hopes to stop newer phishing sites, as well as old phishing sites.

There are a lot of changes within IE 7, though not as many as we´d hoped and some that are merely cosmetic. Missing are innovative, cutting-edge features such as search engine suggestions, live feeds within bookmarks, inline spell-checking, and session restore–features offered within Firefox 2 – or thumbnail tab previews, desktop widgets, or voice (which can read Web pages aloud) – features offered by Opera 9. Given a proposed 18-month development cycle for the next release of Internet Explorer, IE 7 was Microsoft´s one chance to leapfrog ahead of the competition, but the company has only barely caught sight of the current front-runners.

That said, everyone should upgrade to IE 7 when offered the chance, even if you never intend to use it. Because Internet Explorer is so tightly bound within Windows XP SP2 (for example, if you view an HTML document in Microsoft Word, you´re using IE technology), it´s better to have the improved code within IE 7 running on your system than not. But for a truly secure Internet browser with more features, we still recommend Mozilla Firefox.

About Author