Microsoft Edge 108 stable release with TLS ECH encryption enabled

CTOnews.com, December 6 (Xinhua)-- after Google fixed 28 security vulnerabilities, the Chromium-based Microsoft Edge browser also followed suit with a 108th version update. In the latest 108.0.1462.41 update, Microsoft has fixed a total of 25 vulnerabilities, including CVE-2022-4262, which has been exploited by hackers.

Unlike in the past, this Microsoft Edge update does not include Google services. For CVE-2022-4174 to CVE-2022-4195, as well as CVE-2022-4262, CVE-2022-44688, and CVE-2022-44708, several vulnerabilities will be fixed later.

CTOnews.com learned that Microsoft Edge 108 stable also introduced Graph APIs for Cloud Site List Management, allowing IT administrators to create, manage, and publish lists of websites for IE Mode in the cloud within the enterprise.

In terms of the new strategy, the following two new strategies are introduced:

EncryptedClientHelloEnabled-TLS EncryptedClientHello is enabled

NewTabPageAppLauncherEnabled-hides the application launcher on the new tab of Microsoft Edge

CTOnews.com learned that the goal of ECH (Encrypted Client Hello) is to overcome the shortcomings of ESNI, and as the name suggests, ECH has greater ambitions to encrypt not just SNI, but the entire Client Hello. ECH also uses DoH to distribute keys, but has made improvements in the distribution process. Instead of terminating the connection after the ESNI server fails to decrypt, the ECH server provides the client with a public key for the client to retry the connection in order to complete the handshake.