Security developers representing four of the major browser firms have met up to discuss how to combat security threats. Techies working on Internet Explorer, Mozilla/FireFox and Opera teamed up with the folks from Konqueror to discuss how to combat security risks posed by phishing, aging encryption ciphers and inconsistent SSL Certificate practices. A surprising amount of consensus emerged through the informal meeting, hosted by Konqueror's George Staikos in Toronto last week.

All agreed to push ahead with plans to introduce stronger encryption protocols. "With the availability of bot nets and massively distributed computing, current encryption standards are showing their age," Staikos writes. "Prompted by Opera, we are moving towards the removal of SSLv2 from our browsers. IE will disable SSLv2 in version 7 and it has been completely removed in the KDE 4 source tree already."

Colour coding the address bar on browsers, to indicate whether the digital certificate of a site has been validated, and Microsoft's development of an anti-phishing plug-in for its upcoming IE7 browser also got an informal thumbs up. Altogether the meeting showed techies on competing teams have come a long way since the browser wars of the late 1990s and are now focused on fighting a common enemy, virus peddlers and criminal hackers. "I'm very optimistic about the future of co-operation among browser developers and I hope this recent work signals a new trend of good relations," Staikos concludes.

A fuller account of the meeting can be found on a KDE development blog here (http://dot.kde.org/1132619164). ®

Related stories

Opera screeches at Mozilla over security disclosure (18 February 2008)
http://www.theregister.co.uk/2008/02/18/opera_moz_security_disclosure_row/
Firefox outshines IE in phish fight (15 November 2006)
http://www.theregister.co.uk/2006/11/15/firefox_phish_test/
Firefox fans offered name check (17 July 2006)
http://www.theregister.co.uk/2006/07/17/firefox_name_check/
Opera 9 beta debuts (20 April 2006)
http://www.theregister.co.uk/2006/04/20/opera_9_beta/
Firefox under fire from multiple security bugs (18 April 2006)
http://www.theregister.co.uk/2006/04/18/firefox_security_update/
Why phishing reels punters in (31 March 2006)
http://www.theregister.co.uk/2006/03/31/phishing_study/
Opera preview bakes in BitTorrent (9 February 2006)
http://www.theregister.co.uk/2006/02/09/opera9/
Security glitch bites IE7 beta (2 February 2006)
http://www.theregister.co.uk/2006/02/02/ie7beta_vuln/
MS seeks feedback on IE7 beta 2 (1 February 2006)
http://www.theregister.co.uk/2006/02/01/ie7_beta2/
Phishing fraudsters target Apple (17 January 2006)
http://www.theregister.co.uk/2006/01/17/apple_phish/
Thunderbird is go (12 January 2006)
http://www.theregister.co.uk/2006/01/12/thunderbird/
Update glitch spins out IE7 beta testers (19 December 2005)
http://www.theregister.co.uk/2005/12/19/ie7beta_patch_glitch/
Mozilla Firefox 1.5 has landed (30 November 2005)
http://www.theregister.co.uk/2005/11/30/firefox_upgrade/
Opera *nixed by security bug (24 November 2005)
http://www.theregister.co.uk/2005/11/24/opera_nix_bug_fix/
Firefox gains ground on IE (3 November 2005)
http://www.theregister.co.uk/2005/11/03/browser_survey/
MS adopts stronger encryption for IE7 (25 October 2005)
http://www.theregister.co.uk/2005/10/25/ie7_crypto_boost/
Opera tunes up to overtake Firefox (30 September 2005)
http://www.theregister.co.uk/2005/09/30/opera_strategy/
IE7 details leak onto web (16 March 2005)
http://www.theregister.co.uk/2005/03/16/ie7_leak/