Microsoft Browser Vulnerability Research Team is experimenting with Super Duper Secure Mode in Edge on Windows. As of now, the company calls feature with that funny name, too early to call it official. The feature when enabled, claims to provide a more secure browsing experience by disabling JIT in the Microsoft Edge browser.
Highlights:
- Microsoft is testing a new feature to provide a more Secure browsing Experience in Edge
- As of now, the so-called Super Duper Mode disables JIT and enables new Controlflow Enforcement Technology (CET) in Edge render process.
- Microsoft hopes SDSM to support Web Assembly, Arbitrary Code Guard (ACG), and other new security mitigations over the next few months.
- The feature is available behind a flag in all pre-release channels. Beta 93 is a good starting point to test.
Project Super Duper Secure Mode (SDSM)
Microsoft feels JIT in browsers is a performance improvement but it comes at the cost of security bugs and subsequent patches.
The company says disabling JIT leads to fewer security and emergency patches and removes roughly half of v8 JavaScirpt Engine bugs that must be fixed.
With the new mode, the Microsoft VR team hopes to build ” something that changes the modern exploit landscape and significantly raises the cost of exploitation for attackers”.
Microsoft’s early testing results indicate users don’t notice the difference in this mode.
Enable Super Duper Secure Mode in Microsoft Edge browser
- Launch Microsoft Edge browser
- Visit edge://flags/#edge-enable-super-duper-secure-mode
- Select Enabled and restart the browser
Note: The flag is available in Edge Canary, Dev, and Beta versions. The company has plans to test the feature for Edge on Android and Mac as well.
More on Microsoft Edge:
Edge 94 allows to Immediately Put Inactive Tabs to Sleep
Microsoft Edge 92 stable for Android with Unified Code base now available
Microsoft Edge appears in Store on Windows 11
Microsoft Edge on Windows 11 gets its first UI changes
