We’ve just been told yesterday that to reduce our attack surface, only Edge will be allowed on our workstations. Reasoning is that it’s difficult to make sure everyone is properly updates their browser, and since Edge is handled by windows updates, it’s easier to monitor proper updates.
While I understand that reasoning, the tradeoff between pretty small risk reduction associated with unlikely attack surface from different browsers, and the massive drop in employee satisfaction, is simply not worth it.
I use a mix of edge and chrome at work and Firefox and chrome at home. In boring work use (not signed into the browser, no extensions, no real customization), edge and chrome feel pretty similar to me. I will happily admit that I am using both basically out of the box and that if you’re invested in the configuration of one it might be annoying to switch.
We’ve just been told yesterday that to reduce our attack surface, only Edge will be allowed on our workstations. Reasoning is that it’s difficult to make sure everyone is properly updates their browser, and since Edge is handled by windows updates, it’s easier to monitor proper updates.
While I understand that reasoning, the tradeoff between pretty small risk reduction associated with unlikely attack surface from different browsers, and the massive drop in employee satisfaction, is simply not worth it.
I use a mix of edge and chrome at work and Firefox and chrome at home. In boring work use (not signed into the browser, no extensions, no real customization), edge and chrome feel pretty similar to me. I will happily admit that I am using both basically out of the box and that if you’re invested in the configuration of one it might be annoying to switch.