Sure, Google Chrome Frame increases the Microsoft IE attack surface…
… but there’s more to the issue than what’s
currently being bickered about.
Google’s
Chrome Frame plugin for Internet Explorer is meant to incorporate web 2.0 functionality that the IE browser currently does not support. As reported in
[1] Microsoft fired back claiming that Google’s plugin will double the threat landscape for Internet Explorer users and that they would not recommend this plugin to their relatives. While Microsoft’s statement has
some theoretical truth to it — in the superficial conjecture that more code means more vulnerabilities — it naively discounts the beneficial security features the plugin can add to the system.
