Advice Request The best experimental flags for Microsoft Edge (edge://flags)

[oldschool]

My current Edge flags, based on Chromium Hardening:

 

[DJDANY]

^ok and respond fast or slow ?

 

[oldschool]

^ok and respond fast or slow ?

Sorry, I don't understand.

 

[DJDANY]

Sorry, I don't understand.

Feel something in speed when you browse the internet

 

[oldschool]

Feel something in speed when you browse the internet

Edge has always been fast so I'm not sure if these flags made a noticeable difference. I don't perform technical testing. Mostly they improve security, privacy and put a stop to certain new 'features'.

 

[oldschool]

@Alexai Here are my current Edge flags.

 

[Alexai]

@Alexai Here are my current Edge flags.
View attachment 278299View attachment 278300View attachment 278301View attachment 278302View attachment 278303View attachment 278304

Only flags?

 

[oldschool]

Only flags?

Flags only. No policies.
Switches:

--enable-features="EnableCsrssLockdown,EncryptedClientHello,IsolateSandboxedIframes,RendererAppContainer" --no-pings

 

[TairikuOkami]

edge://flags/#test-third-party-cookie-phaseout

That new flag is annoying as hell with that notice.

 

[oldschool]

edge://flags/#test-third-party-cookie-phaseout

That new flag is annoying as hell with that notice.

View attachment 280764

Does it happen on every re-launch? I just enabled and it only showed on one tab.

 

[TairikuOkami]

Does it happen on every re-launch?

Yes, I have Edge blocked to be run in the background, so it shows every single time I re-launch, on every tab.

 

[oldschool]

Yes, I have Edge blocked to be run in the background, so it shows every single time I re-launch, on every tab.

View attachment 280769

Wow, I just tested it and if I close it on first tab at launch it doesn't reappear on other tabs. BTW I don't allow it to run in the background either.

 

[TairikuOkami]

BTW I don't allow it to run in the background either.

Interesting, must be caused by other settings, I also remove browser caches, cookies and such, maybe it is stored there. I had problems with extensions because I remove too much at close.

 

[oldschool]

I also remove browser caches, cookies and such, maybe it is stored there.

Nope. I do the same here.

 

[oldschool]

Re-posting from another thread. Flags and policies are easy ways to increase browser security, even if only a little.

My current flag setup in Edge.

And one additional:

Bind cookies to their setting origin's scheme

 

[TairikuOkami]

edge://flags/#enable-standard-device-bound-session-credentials

Device Bound Session Credentials (DBSC) is a new feature that uses cryptography to limit the use of authentication cookies to the device that created them. This aims to protect Chrome users against malware that steals cookies and bypasses MFA. The second (DBSC) origin trial starts in Chrome 142 with new updates to prevent cookie theft.

Fighting cookie theft using device bound sessions

Cookies – small files created by sites you visit – are fundamental to the modern web. They make your online experience easier by saving bro...

blog.chromium.org

 

[Sampei.Nihira]

edge://flags/#enable-standard-device-bound-session-credentials

Fighting cookie theft using device bound sessions

Cookies – small files created by sites you visit – are fundamental to the modern web. They make your online experience easier by saving bro...

blog.chromium.org

Interesting, thanks for sharing.
I enabled the flag (standard) in Chrome.
Is this flag present in Edge?



P.S.

However, I prefer not to enable persistence.

More info:

GitHub - w3c/webappsec-dbsc: Device Bound Session Credentials: A Protocol for Protecting From Cookie Theft

 

[Trooper]

edge://flags/#enable-standard-device-bound-session-credentials

Fighting cookie theft using device bound sessions

Cookies – small files created by sites you visit – are fundamental to the modern web. They make your online experience easier by saving bro...

blog.chromium.org

Thanks for this! Did you choose "Standard" for this on Edge?

 

[Trooper]

Interesting, thanks for sharing.
I enabled the flag (standard) in Chrome.
Is this flag present in Edge?

View attachment 292257

P.S.

However, I prefer not to enable persistence.

More info:

GitHub - w3c/webappsec-dbsc: Device Bound Session Credentials: A Protocol for Protecting From Cookie Theft

Yes it is. Here are the options for it on Edge.

 

[TairikuOkami]

Did you choose "Standard" for this on Edge?

That is no longer an option in the 142 Beta.