Question Unsafe Browsing and Edge's Enhance Security Mode

[Azazel]

Do you think Edge's enhance security mode and Renderer process running in Appcontainer makes visiting risky websites safe?

Microsoft Edge deepens defenses against malicious websites with enhanced security mode

Browser adds defense in depth to prevent abuse of unpatched vulnerabilities

portswigger.net

 

[TairikuOkami]

No. It is just another sale pitch called ultra super extra security that does almost nothing, but it is supposed to convince people to use Edge. Just like Google Advanced Protection.
It is like products, which kill 99% bacteria, but they fail to mention that 99% bacteria are harmless to people. It is not entirely useless, but I would not switch a browser based on that.

 

[LennyFox]

Because AppContainer has less rights than Untrusted and disabling JIT also removes the nessecity to make working memory writeable you are better protected against vulnabilities and exploits. But it is overhyped to make people endure the bloat Edge adds to your browser. Chrome can be configured to run with similar additional protection.

For more common threats using two profiles is a better approach. One for visiting trusted websites and one for visiting risky websites. In the risky website profile, you can disable (set to block or deny) all site permissions except images, sound/video play, javascript and cookies (leave those on default).

Two user profiles also allows you to use two different DNS services. I have sort of copied Tairiki's approach to limit the allowed TopLevelDomains in the DNS for the risky surfing profile to com, io, net, org and EU plus NL(because I am living in the NL).