Advice Request Edge://flags defaults - feedback/help asked

[Lenny_Fox]

Opera has an indicator which shows what the default value is. Edge-chromium just shows DEFAULT. So I have to guess whether the default value is enabled or disabled.

Please give feedback on my edge://flags settings below. For instance when I have set a value which is already the default or when I have understood the English text wrong and my setting makes things worse in stead of improving security, privacy or performance.

Thanks for help and feedback

 

[oldschool]

I don't know about this flag: "Blockable mixed content switch as site setting", whether or not enabled may be making it less secure. The default setting has warned me once or twice. I have most of the other flags enabled as you and they look good AFAIK.

 

[silversurfer]

• Treat risky downloads over insecure connections as active mixed content [Disallows downloads of unsafe files (files that can potentially execute code), where the final download origin or any origin in the redirect chain is insecure if the originating page is secure. – Mac, Windows]

Sometimes that seems to block downloads even from sources HTTPS like from homepages of popular software...

 

[oldschool]

• Treat risky downloads over insecure connections as active mixed content [Disallows downloads of unsafe files (files that can potentially execute code), where the final download origin or any origin in the redirect chain is insecure if the originating page is secure. – Mac, Windows]

Sometimes that seems to block downloads even from sources HTTPS like from homepages of popular software...

Yes, I have occasionally experienced this myself.

 

[Lenny_Fox]

@oldschool @silversurfer Thanks, set "Treat Risky downloads" and "Blockable mixed content" to default.

 

[Sampei Nihira]

In this article there is a proof of concept:

Google Chrome to Block Mixed Content Downloads, Prevents MiTM Attacks

Google is moving forward with its plan to block mixed content downloads from web sites to protect users from man-in-the-middle attacks.

www.bleepingcomputer.com

But I, with Chrome, still manage to download the exe file.