In its ongoing effort to boost the usage of its Edge browser, Microsoft is marketing the software to users of its Defender security suite with an unusual prompt – and drawn criticism for blurring a line between advising and advertising.

The tactic, a reader who works as a CTO told us, amounts to a "dark pattern" – an interface element or menu that is deceptively designed to steer users toward a particular choice.

The prompt to use Edge promotes a feature known as [1]In-browser protection with Microsoft Edge for Business .

[2]

Edge for Business is a tool that allows admins to separate personal and business browsing profiles and ensure data doesn't leak between the two. In-browser protection means those using Defender for Cloud Apps and Microsoft Edge for Business, if subject to session policies, receive protection equivalent to a reverse proxy – without the potential latency or compatibility issues.

[3]

[4]

Setting aside the supposed security merits of tying Defender to Edge, the issue here is that Microsoft's solicitation to switch to Edge is made more compelling by use of an interface element that resembles a prompt, rather than clearly being an advertisement.

"This is a feature released to all users of the Defender suite, unannounced and enabled by default, that presents an interstitial prompt to switch to Edge designed to look like a security recommendation to users accessing Azure Functions on Chrome (and other browsers, I'd assume)," the reader explained.

[5]

"It's both a dark pattern in the sense of disguising advertising as a security function and in the sense of leveraging Microsoft's enterprise security platform market position to improve browser share."

[6]

Screenshot of the Edge promotion said to look like a security prompt – Click to enlarge

Microsoft's documentation explains: "In-browser protection with Microsoft Edge for Business is turned on by default. Admins can turn the integration off and on, and can configure a prompt for non-Edge users to switch to Microsoft Edge for enhanced performance and security."

When this feature was in preview, it was [7]disabled by default, according to Myron Helgering, a security engineer and Microsoft MVP who blogs about Microsoft-related topics. He described the process of signing in with Google Chrome with the prompt active as follows:

Microsoft will nudge me (if configured) to use Microsoft Edge for Business instead of Google Chrome.

The prompt can be disabled through the Microsoft Defender admin center.

Asked to address the claim that the Edge ad represents a dark pattern, a Microsoft spokesperson replied:

Today organizations use Microsoft Defender for Cloud Apps, a comprehensive SaaS security solution to get full visibility into their SaaS app landscape and help protect their apps. In Defender for Cloud Apps, administrators can set policies to control how users can interact with SaaS apps in the browser. In the past, we only provided reverse proxy technology to enable these capabilities, which supports any browser. Recently we launched a public preview where Defender for Cloud Apps integrates directly with Microsoft Edge, which enables a more streamlined experience, reducing latency and improving other factors of the experience. Admins have full control over this experience and can turn this capability off entirely.

This is not the first time Microsoft has been called out for the way it markets Edge – a long-time laggard in a market dominated by Google's Chrome browser.

[8]FTC urges judge to spank Google over Android App market monopoly

[9]It's all drying up: Microsoft to erase 3D Paint from digital store

[10]Google-commissioned report claims early adopters already enjoying fruits of gen-AI labor

[11]CrowdStrike president cheered after accepting 'Epic Fail' Pwnie award

In February 2024, Mozilla, which has its own set of challenges to retain the user base of its Firefox browser, published a report highlighting the way Microsoft pushed Windows users to adopt Edge using dark patterns. The Mozilla [12]report [PDF], titled "Over the Edge: How Microsoft's Design Tactics Compromise Free Browser Choice," found that "Microsoft repeatedly uses harmful designs to influence users into using Edge."

Among various incidents, the report observed that Edge has injected ads for itself into Google's website, and into the Edge menu area when visiting the Chrome Web Store.

Mozilla cited the ways [13]Edge has injected ads for Microsoft's browser into the Chrome download page on Google's website – to discourage those intent on downloading Chrome from switching away from Edge. It also chastised Microsoft for using Bing to insert an Edge promo above search queries seeking to download a rival browser.

Mozilla declined to comment on Microsoft's In-browser protection promotion.

[14]

Edge presently boasts a global market share of around five percent, having overtaken Firefox for third place in early 2022, according to [15]StatCounter . Safari accounts for about 18 percent of global browser usage, and Chrome leads with about 65 percent of the market. ®

Get our [16]Tech Resources



[1] https://learn.microsoft.com/en-us/defender-cloud-apps/in-browser-protection

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZryAR4OiT@KVJKVIkGDpjQAAAFA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZryAR4OiT@KVJKVIkGDpjQAAAFA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZryAR4OiT@KVJKVIkGDpjQAAAFA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZryAR4OiT@KVJKVIkGDpjQAAAFA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[6] https://regmedia.co.uk/2024/08/13/edge_promo.jpg

[7] https://myronhelgering.com/first-look-at-in-browser-protection-with-edge-for-business/#Advantagesofinbrowserprotection

[8] https://www.theregister.com/2024/08/13/ftc_google_android_monopoly/

[9] https://www.theregister.com/2024/08/12/in_memoriam_microsoft_3d_paint/

[10] https://www.theregister.com/2024/08/12/google_ai_roi_report/

[11] https://www.theregister.com/2024/08/12/crowdstrike_president_cheered_following_acceptance/

[12] https://research.mozilla.org/files/2024/01/Over-the-Edge-Report-January-2024.pdf

[13] https://www.theregister.com/2023/02/23/microsoft_edge_banner_chrome/

[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZryAR4OiT@KVJKVIkGDpjQAAAFA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[15] https://gs.statcounter.com/

[16] https://whitepapers.theregister.com/