5 of 10Image
Trusted sites is a security zone for web sites that you believe are securely designed and contain trustworthy content. To add or remove sites from this zone, you can click the "Sites" button (see next slide).
CERT/CC recommends that you set the security level for the Trusted sites zone to Medium. When the Internet Zone is set to High, you may encounter web sites that do not function properly due to one or more of the associated security settings.
This is where the Trusted sites zone can help. If you trust that the site will not contain malicious code, you can add it to the list of sites in the Trusted sites zone (see next slide).
Once a site is added to this zone, features such as ActiveX and active scripting will be enabled. The benefit of this type of configuration is that IE will be more secure by default, and sites can be “whitelisted” in the Trusted sites zone to gain extra functionality.
When you click on the "Sites" button (previous slide), a new window pops up that lists the sites that you trust and permit you to add or remove sites.
You may also require that only sites with Secure Sockets Layer (SSL) implemented can be active in this zone.
This permits you to verify that the site you are visiting is the site that it claims to be.
In the Privacy tab, you can configure settings for (text files placed on your computer to track your movements about the Web.
CERT/CC recommends that you select the Advanced button and select Override automatic cookie handling.
See next slide for instructions on how to configure this setting.