In the recent audit carried out by the German Federal Office for Information Security (Bundesamt f\u00fcr Sicherheit in der Informationstechnik, or BSI), among the desktop web browsers that were audited \u2014 Google\u2019s Chrome 76, Microsoft\u2019s Edge 44 and Internet Explorer 11, and Mozilla\u2019s Firefox 68, only Firefox pass all minimum requirements for mandatory security features.<\/p>\n\n\n\n
The audit was carried out using rules detailed in a guideline for \u201cmodern secure browsers\u201d that the BSI published last month, in September 2019. The BSI normally uses this guide to advise government agencies and private sector companies on what browsers are safe to use.<\/p>\n\n\n\n
According to BSI\u2019s updated guidelines, a truly secure browser has to support up-to-date technologies like TLS, HTTP Strict Transport Security (HSTS), Same Origin Policy and Content Security Policy (CSP) 2.0.<\/p>\n\n\n\n
The browser must also support automatic updates, and not just for its own code. It must also handle updates for extensions, and the two mechanisms need to function independently of each other.<\/p>\n\n\n\n
Areas where the other browsers failed include: Lack of support for a master password mechanism (Chrome, IE, Edge); No built-in update mechanism (IE), and No option to block telemetry collection (Chrome, IE, Edge).<\/p>\n\n\n\n