URL Moniker Services Security (Windows CE 5.0)
The Uniform Resource Locator (URL) security zones templates in Windows CE set default policies for URL actions within each of the following security zones: My Computer, Local Intranet, Trusted Sites, Internet, and Restricted Sites. For more information about URL actions and their corresponding policies for each zone, see URL Security Zones.
For more information about Windows CE security services, see Enhancing the Security of a Device.
Best Practices
Create a custom security manager
If your application is a host for the WebBrowser control or MSHTML, implement the IInternetSecurityManager interface to create a security manager to specifically handle those URL policies and actions that are important to your application.
Monitor activity on your Web site
Use the Hit Logging to track page activity and atypical usage patterns.
Write safe asynchronous pluggable protocols
Ensure that you write safe asynchronous pluggable protocols that do not pose security threats to your device, such as, by overriding the default protocol and tampering with data on the device. For more information about asynchronous pluggable protocols, see Using Asynchronous Pluggable Protocols.
Use URL Security Zones
Applications that host a web browser control can manage the default URL Security Zone settings by implementing the IInternetZoneManager interface. Keep in mind, however, that any changes made using IInternetZoneManager will not be static because the user can override them. For more information see URL Security Zones.
Use caution when you change URL Security Zone settings
Ensure that the client application uses the correct security zone setting. Changing this setting may pose a potential security threat to the device. For information about the default security zone settings, see URL Security Zones.
Default Registry Settings
Some of the registry settings for URL Monikers may have security implications. The registry settings documentation contains Security Note entries with information about security issues.
For information about default registry settings, see URL Moniker Services Registry Settings.
Ports
For information about ports, see see Internet Explorer 6 Security.
See Also
URL Moniker Services | Internet Explorer 6 Security
Send Feedback on this topic to the authors