Time to die, but Microsoft can't kill Internet Explorer 6

Geoff Spick
05 February 2010, 10:01 AM


World governments want you to stop using IE6. Microsoft does too. But the software giant claims its hands are tied -- it's like a drug. Why Microsoft can't stop supporting IE6.


After all the fuss about the Chinese Google-hack being blamed on Internet Explorer 6, it seems to be everyone's favourite target at the moment. Fair enough, the decade-old browser is long overdue for retirement, having been replaced by a whole generation of faster, better featured and more secure products.

Yet, it is still a popular browser, with Internet Explorer 8 only having just crept ahead, according to NetMarketShare, out there in the real world where people are more worried about flu viruses than the data-stealing type. 20% of the world's internet users are still using IE6 for reasons known only to them -- though we'd wager a lot of older PCs in developing countries along with lazy IT departments in big corporations are largely to blame for this residual figure.

As we recently reported, Google, is now putting the screws on IE6 and is planning to phase out support for the browser, by removing it from Google Docs supported list on March 1st. Today, Google went a bit further, announcing it will discontinue IE6 support for Gmail and Google Calendar later this year. The money quote from their email: " Later in 2010, we will start to phase out support for these browsers for Google Mail and Google Calendar. "

Even Microsoft itself is using this strategy as a carrot to get users and companies to move away from IE6; the upcoming web versions of its Office 2010 apps (that can run in a browser) will support only IE7 upwards (including Firefox 3.5 and Safari 4) -- IE6 users won't be able to access the apps properly.

In the UK, the government has started instructing its public service departments to stop using the decrepit browser.

While the recent urgent fix from Microsoft may have fixed the holes, it still leaves a very old piece of software running on a lot of systems that increasingly isn't up to the job of providing adequate security and displaying websites built using modern web standards.

We do have to give some credit to Microsoft for having the balls to come out and say "Stop using IE6, IE7 NOW" recently in a press release in response to the armada of hacking attacks eminating from China.

But Microsoft says it can't formally withdraw support for the browser, because in the midst of malcontent about Windows Vista, it agreed to keep supporting Windows XP for another five years -- until April 8, 2014. Unfortunately, IE6 shipped as the default browser with Windows XP, so Microsoft is compelled to keep propping it up with patches and fixes for years to come.

On Microsoft's IEblog, Microsoft engineer Dean Hachamovitch explained:

The engineering point of view on IE6 starts as an operating systems supplier. Dropping support for IE6 is not an option because we committed to supporting the IE included with Windows for the lifespan of the product. We keep our commitments. Many people expect what they originally got with their operating system to keep working whatever release cadence particular subsystems have.

In some places, this is due to compatibility reasons for old internal apps that were built around Internet Explorer 6-specific code, but most places have little reason to be using it other than the lethargy of the people who control the system images running on PCs -- or who lack the will to make a convincing argument to senior management that the cost of rolling out IE8 or another browser is worth the reduced security risk.

One positive factoid, according to the Netmarketshare stats above, is that Google Chrome is the fastest growing browser, so perhaps more companies will consider this regularly updated and improved product (now at version 4) for its staff rather than just clinging to IE.

Note -- the kookie "Die IE6 DIE!" image on this article is a badge produced by Zazzle.co.uk. If you really want to show your hatred for IE6, you might want to order one.

With additional reporting by Dan Warne

Post your comment



Comments

RSS feed Email alert

apt.pupil (New user):

well with the company we work for- they refuse to upgrade their retail outlets to IE7 which completely bewilders me.


I have already checked, and found that our business applications DO indeed support IE7, but this is a case of the lazy IT dept. So why is a free upgrade overnight going to be too big of a cost is what i want to ask them(but fear for my job if i do)

05 February 2010, 12:13 PM (3 years ago)report abuse Send to a friend reply

Phred (New user):


Quoting apt.pupil:
but this is a case of the lazy IT dept

Not really... It costs time and money to perform proper test and certification of applications. It 'may' work in a different browser, but
it could pose a security threat, or cause performance issues either on the desktop or on the server.

05 February 2010, 2:06 PM (3 years ago)report abuse Send to a friend reply

apt.pupil (New user):

Quoting Phred:
It costs time and money to perform proper test and certification of applications

yet the IT department are all using the same systems on IE7. I asked them out of curiosity before the windows 7 launch.
The upgrade to IE7 will take some time- and would draw in employment costs- i can understand that much, but not more important than them installing updates to our own company software overnight


05 February 2010, 2:16 PM (3 years ago)report abuse Send to a friend reply

Tin (User):

Quoting Phred:
It costs time and money to perform proper test and certification of applications.


Also costs time to NOT upgrade when it comes to security stuff. Potential cost to upgrade is in the tens of thousands (assuming web apps don't need rewriting). Potential cost for not upgrading is measured in millions.

05 February 2010, 3:10 PM (3 years ago)report abuse Send to a friend reply

Tin (User):

I can understand some places not wanting to upgrade. It takes time, and sometimes there are higher priorities. Some organisations don't spend enough money on IT, leading to only having limited man-hours to do everything.
Personally, I have only just started rolling out IE 8 to replace 6 at one of my workplaces. It takes time to package suitably, test how it will rollout, check nothing breaks, etc. It's not as simple as just installing it when you've got more than about 10 computers (and as many users) to do.

05 February 2010, 3:23 PM (3 years ago)report abuse Send to a friend reply

Phil in NZ (New user):

You would be surprised how many organisations either still use windows 2000 or have windows 2000 computers/servers. ie6 is the most modern browser (from microsoft) that can be installed on these machines.

05 February 2010, 3:55 PM (3 years ago)report abuse Send to a friend reply

The Big Baboo (New user):

Why should they up-grade it :) For all the trumpet blowing Microsoft do about how good their products are,they still make money from them even if they're antiquated bits of 19th century crap.Yes I have IE6 on my PC but I use Firefox for all my browsing and other stuff.In fact if there was a way of removing IE6 completely from my system without stuffing something else up,I'd have done it years ago :)

06 February 2010, 8:23 AM (3 years ago)report abuse Send to a friend reply

apt.pupil (New user):

sadly i have the folowing browsers on my pc:
Safari 4, Netscape 6, IE8, Firefox 3.6, Opera 10, chrome and Flock.

The one browser left that i need to make my little collection(i am a rookie web developer, and spend a lot of spare time tweaking my clan's website)complee that i know people still use- and that is IE6. Personally i despise the browser, but knowing there is a possibility of people visitng my web site that have IE6(even though my statistics show only 4% of browser visits have been from IE6), and me not being able to test my website compatibility with IE6 is irritating.

06 February 2010, 12:09 PM (3 years ago)report abuse Send to a friend reply

Tin (User):

Have a look at IE Tester... It can render using IE5.5, 6, 7 & 8.
http://ietester.com/

06 February 2010, 12:24 PM (3 years ago)report abuse Send to a friend reply

apt.pupil (New user):

Quoting Tin:
Have a look at IE Tester... It can render using IE5.5, 6, 7 & 8.
http://ietester.com/

oh sweet. Cheers for that link.






06 February 2010, 1:31 PM (3 years ago)report abuse Send to a friend reply

fish (New user):

The problem is not just the cost of replacing a browser version in an enterprise. Enterprises run a swag of critical applications with restrictions on what browsers they will support. If these dependencies are not met then their hands are tied.

07 February 2010, 9:48 AM (3 years ago)report abuse Send to a friend reply

Raindog (New user):

Quoting fish:
The problem is not just the cost of replacing a browser version in an enterprise. Enterprises run a swag of critical applications with restrictions on what browsers they will support. If these dependencies are not met then their hands are tied.

Version checking is one problem the other problem is early gen web systems written to render for IE6.

All of this is the price of stepping away from industry standards, the short term gain if customisation to MS ultimately becomes long term pain. A lesson to be learn by myopic IT managers and to be learnt by MS themselves.




07 February 2010, 10:08 AM (3 years ago)report abuse Send to a friend reply

apt.pupil (New user):

here is the thing.
the software that we use has been tested by the IT department, and the IT department use IE7 on their own computers to connect to the exact same system. the testing has been done- now its just a matter of setting up the time needed to remotely upgrade all of our computers to IE7- which- with there being well and truly over 100 stores nationwide and only a small team(less than 20 iirc) who actually work in the IT dept. for this to happen. I can understand the lack of wanting to upgrade us, since we would have more system downtime than we usually have. i know the IT dept. use IE7, because one of their members told me so himself.

though i am not too sure if our company is going to be vulnerable to the security risks using any IE has(yes, the vulnerability is in the features of ALL IE versions 6 and up, but from IE7, there are some saftey measures IE 6 lacks that will help prevent the zero day exploit) due to our national setup and firewall, but the adage goes: what is made by people, can be broken by people

07 February 2010, 10:36 AM (3 years ago)report abuse Send to a friend reply

Tin (User):

Quoting apt.pupil:
i am not too sure if our company is going to be vulnerable to the security risks using any IE has due to our national setup and firewall


I hope your company's approach is different to DET NSW... DET think NAT at the main internet connection for the WAN is enough. There are no firewalls in schools (at least not any provided by DET - some schools with smart IT people and a budget have them) and DET supplied computers usually have the Windows firewall enabled but with Swiss Cheese style exceptions, mostly with a scope of the entire internet. Conficker had some fun because of this.

Oh, and don't assume a firewall will stop a browser based exploit. Only the browser can prevent that (or proxies blocking sites known to be hosting exploits).

07 February 2010, 11:11 AM (3 years ago)report abuse Send to a friend reply

apt.pupil (New user):

well my company won't directly tell me how their set up, but it works like a VPN(except it is connecting all of our computers across the country- as opposed to a closed environment that i usually see happen with networks), with a firewall and proxy disabling all IP addresses and domains except for a select list. Because of the reviews with Telstra products, this site is on the enabled list.

07 February 2010, 11:37 AM (3 years ago)report abuse Send to a friend reply

anonymous user Anonymous user