News: 1651248004

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Microsoft Edge's 'Secure Network' sounds a lot like a built-in VPN

(2022/04/29)


Microsoft appears to be planning a VPN-like solution for its Edge browser judging by a [1]support page for the upcoming feature.

The change is described as a "preview feature." It has yet to show up on our Canary and Dev versions of Microsoft's browser, however.

The theory is that by using the Microsoft Edge Secure Networking functionality, one will be kept safe from miscreants when joining networks that "may not be adequately secure."

[2]

It sounds an awful lot like a VPN to us. The user's connection is encrypted, online tracking (including stopping an ISP from slurping browsing habits) is trickier, and geolocation is obscured via a virtual IP address.

[3]

[4]

Rivals have long punted VPNs. Mozilla, for example, will happily sell customers a 12-month plan for $4.99 per month while VPN plugins exist for alternative browsers. Microsoft's take, however, appears to be free. Sort of.

A Microsoft Edge sign-in is required, and only 1GB of free data per month is included with the deal, a figure that seems somewhat miserly considering the size of modern web pages and the large amount of streaming that goes on nowadays.

[5]Microsoft fixes cross-account vulns in Azure Database for PostgreSQL service

[6]$10b National Security Agency contract re-awarded to AWS

[7]Microsoft makes account switching easier in its web and desktop apps

[8]Microsoft points at Linux and shouts: Look, look! Privilege-escalation flaws here, too!

Cloudflare powers the service, which will permanently delete all diagnostic and support data collected every 25 hours. As for Microsoft: "To provide access, we store minimal support data and access tokens which are only retained for the duration of the required service window."

It appears as though Cloudflare's [9]1.1.1.1 service . The Register asked the Microsoft, but we have yet to receive a reply.

[10]

There is no indication when the feature will turn up in the mainstream version of the browser.

It will certainly make securing browsing activities more straightforward for users reluctant to fiddle with VPNs and may even lure users into signing into Edge. The act of doing the latter means that sync will get turned on, indicating that all manner of data will be made available over devices running a signed-in version of Edge.

We asked Microsoft when this feature would become more widely available (particularly since the company's Build event is mere weeks away) and will update this piece should the Windows vendor respond. ®

Get our [11]Tech Resources



[1] https://support.microsoft.com/en-gb/topic/use-the-microsoft-edge-secure-network-to-protect-your-browsing-885472e2-7847-4d89-befb-c80d3dda6318

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YmxgCgwaJnXqHTyZb0TqdgAAABA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YmxgCgwaJnXqHTyZb0TqdgAAABA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YmxgCgwaJnXqHTyZb0TqdgAAABA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[5] https://www.theregister.com/2022/04/28/microsoft_azure_postgresql/

[6] https://www.theregister.com/2022/04/28/nsa_wands_aws/

[7] https://www.theregister.com/2022/04/28/microsoft_account_switcher/

[8] https://www.theregister.com/2022/04/27/microsoft-linux-vulnerability/

[9] https://1.1.1.1/

[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YmxgCgwaJnXqHTyZb0TqdgAAABA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[11] https://whitepapers.theregister.com/



Korev

Didn't Opera do this a few years ago? IIRC this was the proper Opera, not the Chromium reskin...

MrDamage

The original Opera offered a "Turbo Mode", which essentially made Opera servers a proxy, but I don't think it offered the VPN service until afetr it was bought out. I may be wrong though.

To me..

IGotOut

it's a more integrated of Cloudflare warp, but for the browser rather than device.

Aka Cloudflare 1.1.1.1

Anonymous Coward

All your data are belong to us.

The interesting question that isn't really interesting is if Microsoft are going to channel everything through a VPN for those 2 users will they make their data available for local government?

LDS

OF course they will delete the raw data after 25h - and having processed them to extract all the interesting information.

Neutron privacy bomb

fidodogbreath

online tracking ( including stopping an ISP from slurping browsing habits ) is trickier

...while leaving MS browser-habit slurping unimpeded.

Cloudflare powers the service, which will permanently delete all diagnostic and support data collected every 25 hours.

Deleting "all diagnostic and support data collected" is not the same as deleting "all data collected."

Re: Neutron privacy bomb

Anonymous Coward

OK, I get they delete the data every 25 hours. But what happens to the data during said hours? Care to bet it's mined and sold to the highest bidder?

Re: Neutron privacy bomb

fidodogbreath

And why 2 5 hours? Is Cloudflare's data center on [1]Martian Standard Time ?

[1] https://en.wikipedia.org/wiki/Sol_(day_on_Mars)

URL

Cinderellaphant

I wonder how this is going to affect gateway based URL filtering. Will corporate users use this to bypass on-prem security?

Re: URL

MatthewSt

I would imagine corporate devices will have the option to disable this (Edge is full of Group Policy goodies) or even configure it to respect your corporate Cloudflare account's rules

Sub 20 Pilot

Thus leaving MS with even more browsing details that others can not see and another opportunity to ''monetise'' - a hideous Americanism - people's data. Those people who have paid for the OS, or paid to use the OS for the pedantic. I look forward to retirement when I can dump their odious shite from every work machine.

If only home routers could offer a VPN too....

LDS

When I'm away I VPN into my own home network and can then navigate from there. Without having to rely on the good will of "free" VPN providers.

See also iCloud Private Relay

Tessier-Ashpool

iCloud+ Safari users can turn this setting on in iCloud settings to get similar functionality. Mostly limited to Safari, but it's free for any paid-for iCloud subscription.

prairies, n.:
Vast plains covered by treeless forests.