Microsoft’s experimental Super Duper Secure Mode aims to improve browser security without adversely affecting performance. The mode has been available for Edge Beta, Dev, and Canary for around one month, though people have to enable it through edge://flags. Following an update, Super Duper Secure Mode now supports macOS.
Johnathan Norman, the Microsoft Edge vulnerability research lead, shared details about the update on Twitter this week. The new capabilities for Super Duper Secure Mode come with Edge Canary 94.0.992.0+.
Norman notes that some sites, such as YouTube and Facebook, disable Super Duper Secure Mode. Microsoft plans to let people pick which sites use the feature in the future.
Super Duper Secure Mode works by disabling the “Just-in-Time-Compilation” (JIT) engine. Using the JIT engine can improve the performance of websites, but it comes at the cost of security.
“Performance and complexity often come at a cost, and often we bear this cost in the form of security bugs and subsequent patches,” explains Microsoft. “Looking at CVE (Common Vulnerabilities and Exposures) data after 2019 shows that roughly 45% of CVEs issued for V8 were related to the JIT engine.”
Microsoft found that disabling the JIT engine can reduce vulnerabilities. Super Duper Secure Mode is still in its early testing phases. Microsoft explains that it will likely change to something “more professional” in the future.
We may earn a commission for purchases using our links. Learn more.