What Does the Demise of Internet Explorer Mean for the Future of Website Design?

On January 21, 2015, web developers everywhere let out a great collective sigh of relief. Why? Because that was the day Microsoft announced that Windows 10 will ship with a brand new browser, code-named “Project Spartan,” thus effectively signaling the inevitable demise of the old stalwart Internet Explorer. According to Microsoft, Spartan is designed to provide a more interoperable and reliable experience with advanced features including the ability to annotate web pages, a distraction-free reading experience and integration of Cortana for finding and doing things online faster. While this all might sound appealing to the average user, it is particularly welcome news for web developers, for whom Internet Explorer has long been regarded as the very bane of their existence. You see, each browser interprets code in different ways, and each has different versions that offer different capabilities. While Chrome, Firefox and Safari do have their differences, for the most part they have the same capabilities. However, Internet Explorer, or IE, has historically been the odd one out, notorious for causing issues for website designers due to its lack of capabilities, especially in older versions like IE7 and IE8 (which, for example, does not support such simple design elements as rounded corners and text shadows). But while web devs are raising their glasses to toast IE’s impending downfall, you’re probably left with more than a few questions. After all, since IE has been the standard Windows browser since the mid-1990s, that little blue “e” icon has become synonymous with the Internet for many everyday users. So what exactly does Microsoft’s decision to do away with Internet Explorer mean for you – and most importantly – for your website? Let’s explore (no pun intended).

The challenges of IE

On today’s Web, the various browser manufacturers have agreed on a certain set of standards that they will all obey. This is incredibly important for web designers (and, by extension, for businesses that have websites), because it means that as long as your website conforms to those agreed upon standards, it should be displayed in a fairly consistent manner no matter which browser a visitor uses to access your site. Unfortunately, this is not always the case. In the mid-to-late 1990’s, Microsoft was engaged in a heated race for market share with the other most popular browser of the day, Netscape Navigator. Instead of agreeing on a singular set of standards, these two companies tried to outdo each other by adding proprietary features to their software that would interpret and display websites differently. This created a lose-lose scenario for web designers and businesses, as it meant that you either had to develop two different versions of your site (one for each popular browser) or dictate which browser visitors should use (this is why it became commonplace to see disclaimers on sites reading something like “Best viewed in Internet Explorer 4”).  This exclusive approach is what led some companies to build the software they use to run their business for those specific platforms. Even now, almost 20 years later, companies that continue to use that software may still be dictating that their employees must use a woefully outdated browser. This is where IE begin to falter, especially in the court of public opinion. As newer browsers, such as Google’s Chrome – which now ranks as the most popular according to many studies – began to enter the market, people started using them at home. They quickly discovered that these modern browsers were not only much faster but that they also included many new features and capabilities. It didn’t take long for consumers to develop a strong preference for these newer browsers and to begin pushing back against their IT departments’ requirements that were keeping them shackled to antiquated versions of IE at the office.

Microsoft realizes the problem

You might think that Microsoft would love any scenario in which people are forced to use their browser. On the contrary, however, it has created a major PR problem for them. The same IT departments that would not allow employees make the switch to a new browser also prevented them from upgrading to newer versions of Internet Explorer. The reality is that those new versions of IE are very capable browsers that, like the others on the market today, conform to the standards that are an important part of modern web design. Microsoft wants customers to begin using these new versions of their software because the continued use of versions that were originally released 10 years ago or more has created a vey negative perception of their product in the marketplace that has tainted the Internet Explorer brand as a whole.

The struggles of web designers

While old versions of web browsers certainly pose problems for consumers, they are doubly challenging for web designers and for the companies they build sites for. Testing newly developed websites in legacy browsers to ensure reliable backwards compatibility  is a critical step in the process that requires significant time and effort, creating overhead that adds to the timeline and budget of every project. Exactly how many people are visiting your site with those outdated browsers? It depends on the nature of your business. For instance, my company works primarily with IT professionals, and our traffic numbers indicate that the majority of our audience uses newer browsers (including many on mobile devices). As a result, we don’t need to develop and test for very old browsers because our visitors simply aren’t using them. However, if your business serves a more broad base of consumers – and especially if many of your customers are likely to be older and/or less tech savvy – it is important to ensure that your site performs equally well on new and old browsers alike. A good place to start is by examining the analytics data for your site, which can tell you which browsers are being used to access your site. One of the nice things about newer browsers like Chrome and Firefox (and even current versions of IE) is that they auto-update. This means that they automatically download and install their own updates so we no longer need to worry about radically outdated versions of the software. However, older versions of IE do not do this, which is why we still struggle to support software that came out over 10 years ago. With Microsoft’s new browser – which we expect will include auto-update approach – we may hopefully have arrived at a point where even that legacy software is forced to be rewritten for the new age and we can all say a final goodbye to outdated browsers.

Better days ahead

So what does the emergence of Project Spartan mean for your business and your website? In the short term, you may not feel an immediate impact, but you likely will begin to reap the benefits in the not-too-distant future. If Microsoft succeeds in its objective of transitioning customers away from old versions of IE and adopting their new Project Spartan (or other more current and capable browsers), by the next time you are ready for a redesign, the amount of time required for browser testing may be significantly reduced because the browser landscape will have gotten less diverse with the continued shift away from those legacy browsers, which can only mean good things for your project budget! Another benefit will be a greatly reduced potential for users to encounter problems on your site due to browser compatibility issues, which of course means less chance that a frustrated visitor will need to call your company for support (best-case scenario) or will give up on your site and go elsewhere (worst-case scenario). Finally, the release of a new, more capable option from a company that has been at the forefront of browsers for years (despite popular opinion, Microsoft remains a power player in the world of the Web) is a great thing because it gives users more options. And if Microsoft is successful, their competitors will inevitably up their game as well – and that is good news for everyone!

Don’t throw dirt on IE’s grave just yet

While there is certainly much to look forward to with the future release of Project Spartan, unfortunately, we can’t call time of death on IE yet (as much as we might like to). As AdWeek’s Krista Monllos explained to NPR, Spartan is in for an uphill battle: “By introducing a new browser, you're asking people to change their daily habits. If someone is used to Chrome or used to whatever it is they use, they probably don't want to change.” After all, Internet Explorer still accounts for almost a quarter of the present-day desktop browser market, and IE8 is still used by almost seven percent of people in the United Sates. Therefore, moving forward, it will be important to keep a finger on the pulse of the shift in these numbers – as well as any changing trends in your own analytics data – in order to ensure that your site is designed and tested to serve the needs of your users, no matter where they may fall in the continuum of browser evolution.

---

SPF for Your Website: Three Simple Steps to Protect Your Online Presence

As the days get longer and the mercury rises, we’re reminded yet again of the importance of remaining vigilant when it comes to applying sunscreen to protect ourselves from summer’s damaging rays. It’s a simple yet necessary precaution that if neglected has both short-term consequences – the painful agony of sunburn – and long-term ramifications – skin damage and increased risk of skin cancer. The same holds true for our websites. If we are not proactive in taking the necessary precautions to keep our online presence safe, problems will inevitably arise. Here are three simple measures you can take to apply SPF to your website that will safeguard the integrity not only of your brand’s online presence but its reputation as well:

(S)ecure your site against SQL injections.

Websites that feature data-driven applications can be vulnerable to attacks known as SQL injections, whereby malicious code is added to an entry field, then run and executed. These attacks exploit security vulnerabilities in problematic code, attacking your site’s database and performing any number of actions, from adding unapproved content to your public-facing site to allowing the hacker to download your entire database. This is a prime example of why rigorous testing is absolutely critical prior to launch. If your site is already up and running, consult with your web team to make sure that it has undergone thorough testing and is protected against such hacks. If you want to take additional precautionary measures, there are also security companies that specialize in detecting these types of website and database vulnerabilities, and they can provide you with a security audit.

(P)rotect your domain name.

It’s common sense that you must pay to acquire the domain name where your business will reside online. However, it’s important to remember that you have to continue to pay in order to retain the rights to use that domain name. Essentially, when you purchase your domain name, you’re not buying it outright. Rather, you’re renting that name for a specified period of time. Most registrars (Network Solutions, GoDaddy, Register.com, etc.) allow you to secure a name for anywhere from 12 months to 99 years. If you allow your registration to lapse, however, the domain name becomes available for purchase again and is open to the public for anyone to acquire. Bear in mind that there are actually companies that profit handsomely from business owners who neglect their domain registrations. They monitor domains that are nearing expiration, taking ownership of them the moment they become available. If you have the misfortune of having your domain acquired by one of these companies, usually you can negotiate having ownership transferred back to you, but it will cost you dearly. Unfortunately, while this is a shady practice, it is not illegal. If you allow your domain name to expire, it is fair game for anyone to register it – including these types of companies. Before your domain name expires, your registrar will likely send you many notices prompting you to renew. I start getting domain name renewal notices six months or more before the scheduled expiration date, and as that date gets closer, the notices start coming more and more frequently. Still, despite this barrage of email notifications, there are still many companies that are unaware that their expiration date is approaching, and they either lose their domain name altogether or are forced to pay a king’s ransom to get it back. Often when this situation occurs, it is because the person who initially completed the registration process for the domain name is no longer with the company, and therefore the email address they used to register the name is no longer valid, so the multitude of email notices go unreceived. The company innocently thinks they are protected until one day they stop receiving emails (yes, your email is tied into your domain name), or a customer mentions that they tried to go to the site, and it was simply gone. Even though there is a grace period after a domain has lapsed that allows you to reclaim your ownership before it becomes open to the public, the lapse isn’t always discovered in time to take advantage of this safety net. To prevent this, it is critically important to keep the contact information for your domain registration up to date. Either contact your registrar directly or speak with your web team to make sure you know when each of the domain names you own needs to be renewed, and double-check to ensure that the contact information for your account is valid.

(F)ortify your forms.

Web forms are a staple of doing business online. In fact, rare is the site that doesn’t include a form of some sort that allows the user to input information to be transmitted to the site’s owner, whether its purpose is to make a contact inquiry, sign up for a mailing list, complete a purchase, apply for employment, etc. As anyone who has a form on their site can attest, however, not all submissions received via these forms are legitimate. This is called robot spam, which is created by spammers who write programs that send out spambots to indiscriminately fill out any and all different types of forms on the Web, looking for entryways to expose a site’s security vulnerabilities (see SQL injections above). If you find your inbox filling up with indecipherable junk submissions, it’s these bots who are to blame. To combat these spambots, you can install a CAPTCHA system on your form, which generates an image with a random combination of numbers and letters that the user must enter in order to submit the form. The spambots can't interpret these CAPTCHA images, so therefore they can’t complete the process of sending the form. While there is legitimate debate as to whether or not CAPTCHA is the most effective way to prevent bogus submissions, it still remains the most popular solution for web form security. However, the reason it’s important to block these bots goes beyond eliminating the annoyance of a cluttered inbox. A few months ago, my company decided to remove the CAPTCHA requirement from our contact form. We knew we would get a flood of spam submissions, but we decided we could deal with a little extra hassle on our end in exchange for reducing the inconvenience to legitimate users of having to interpret those squiggly letters in order to simply get in touch with us. As expected, the amount of spam we received increased dramatically, but it was still manageable. Then, all of a sudden, we stopped receiving any submissions at all. We also began seeing some of our emails to other people bounce back. What we discovered was that our web domain (which is where our emails originate from) had been blacklisted as spam by Microsoft (which is what powers our email platform). Apparently, all the bogus submissions from our website (which resides on our domain) to our email caused Microsoft to identify us as spammers. This is because our form submissions came from an email address associated with our own domain name (many web forms are configured this way). Obviously, we were not the ones generating the spam, but this strange series of coincidences conspired to get us blacklisted! Fortunately, it was an easy process to get our domain removed from the blacklist, and we quickly re-installed the CAPTCHA system on our contact form, but we certainly learned an important lesson about security and spambots along the way. If you allow those bogus entries to make it through, there is a risk that you, too, could find yourself blacklisted and unable to send email to some of your most important contacts.

Seize the day and stay safe.

Since summer is vacation season for many of us, business tends to slow down slightly as our clients and colleagues enjoy much-deserved time off. That makes this the perfect time to seize the opportunity to apply these S-P-F practices today to ensure that your online presence is well protected all year long.

---