Features new to Windows Vista Windows Vista, Internet Explorer operates in a special "Protected Mode", which runs the browser in a security sandbox that has no access to the rest of the operating system or file system, except the "Temporary Internet Files" folder. This feature aims to mitigate problems whereby newly discovered flaws in the browser (or in ActiveX controls hosted inside it) allowed hackers to subversively install software on the user's computer (typically spyware). Internet Explorer 7 in Windows Vista also exclusively supports Advanced Encryption Standard (AES) key lengths up to 256 bits outlined in RFC 3268 and certificate revocation checking using Online Certificate
Windows Vista operates in a protected mode, which operates with lower permissions than the user and runs in isolation from other applications in the operating system, preventing it from accessing or modifying anything besides the Temporary Internet Files directory. Microsoft's anti-spyware product, "Windows Defender", has been incorporated into Windows, providing protection against malware and other threats. Changes to various system configuration settings (such as new auto-starting applications) are blocked unless the user gives consent. Whereas prior releases of Windows supported per-file encryption using Encrypting File System, the Enterprise and Ultimate editions of Vista include BitLocker Drive Encryption, which can protect entire volumes,