Task 7.3: Configuring IE for Secure Use of Cookies

Cookies have a legitimate purpose. They help maintain state in the stateless world of HTTP. Cookies maintain information as you move from page to page. As an example, if you go to your airline website to book a flight, you will be presented with several questions, such as the date and destination. Cookies help keep track of this information and store it for your browser to use.

Cookies can also be used by advertisers to track your movement, target you with specific ads, and even monitor how many times you go to a specific site. That is why cookie management is such an important issue.

Scenario

You have been tasked with setting up several user computers and have been asked to configure the systems so that they block third-party cookies.

Scope of Task

Duration

This task should take about 10 minutes.

Setup

For this task, you need a Windows computer, access to the Administrator account, and an Internet connection.

Caveat

There is a real balance when dealing with cookies. Blocking none can allow the user’s privacy to be violated, whereas blocking all cookies can cause the user to be endlessly prompted to accept cookies as they move from web page to web page. Blocking all cookies can even make some sites inaccessible, so as with most security options, a balance is preferable.

Procedure

In this task, you will learn how to block third-party cookies in Internet Explorer.

Equipment Used

For this task, you must have:

• A Windows computer
• Access to the Administrator account
• An Internet connection

Details

This task will teach you how to block third-party cookies. First-party cookies come from the site itself, whereas third-party cookies come from the providers of advertising banners or other graphics that make up a specific web page. These cookies are not used by the site you are visiting and can be used for advertising or to track your movement. Restricting these cookies will increase security.

To block third-party cookies, follow these steps:

1. Cookies are managed in the Tools ⇒ Internet Options dialog box in Internet Explorer. After opening the Internet Options dialog box, choose the Privacy tab.

2. On the Privacy tab, click the Advanced button. These settings will allow you to customize the handling of cookies. In the Advanced Privacy Settings dialog box, select the Override Automatic Cookie Handling check box.

3. Once you select that option, settings for first-party and third-party cookies will be available. You will want to choose to allow all first-party cookies and to block all third-party cookies. Session cookies should be allowed. You will want to check the Always Allow Session Cookies box.

4. Once these changes have been completed, you should save the settings by clicking OK and then closing the Internet Options dialog box.

To override the handling of individual websites, click the Edit button on the bottom of the Privacy tab. The resulting dialog box allows you to block or allow all cookies from a specific site.

Criteria for Completion

You have completed this task when you have configured Internet Explorer to allow all first-party cookies and block all third-party cookies.