Lesson 2: Configuring Dynamic Security for Internet Explorer 7+

281

Figure 6-29

The Advanced Privacy Settings dialog box

MORE INFO Custom Privacy Preferences files

The Import button lets you import Internet Explorer Privacy Preferences files to configure custom

privacy settings. These files are written in Extensible Markup Language (XML). The structure and use

of Custom Privacy Preferences files is beyond the scope of this book and the 70-620 examination.

However, if you want more (highly technical) information, access http://msdn.microsoft.com/library

/default.asp?url=/workshop/security/privacy/reference/privacy_ref_entry.asp.

Privacy Policies

Websites that collect personal information typically publish privacy policies that describe how

the site uses this information. You should advise users to read the privacy statement carefully

before entering any personal information into an unfamiliar website. Users need to look for

conditions, such as allowing the website to share information with others or the requirement

that they should accept unsolicited e-mail messages or advertising. Privacy policies are usually

found in the website’s Help section. If you want to read the privacy policies of one of the

world’s best known online sales sites, access http://pages.ebay.com/help/policies/privacy-policy

.html and http://pages.ebay.com/securitycenter/privacy_central.html.

You can also access the privacy policy for a specific webpage by clicking Page in IE7+ and

selecting Web Page Privacy Policy. This opens the Privacy Report dialog box, which gives you

a list of the items that the site you have accessed owns. You can then select a webpage item and

click Summary. Typically, however, a website’s Help page gives you more information than the

IE7+ privacy report feature. Clicking the Settings button in the Privacy Report dialog box lets

you view the privacy settings on your computer.

You need to advise users that even though a website has a privacy statement, this does not

mean that the web service provider will not misuse information. Users should not give per-

sonal information to a website they do not trust.