Firefox to US$7,500 cash reward) to researchers who discover severe security holes in Firefox. Official guidelines for handling security vulnerabilities discourage early disclosure of vulnerabilities so as not to give potential attackers an advantage in creating exploits. Because Firefox generally has fewer publicly known security vulnerabilities than Internet Explorer (see "Comparison of web browsers"), improved security is often cited as a reason to switch from Internet Explorer to Firefox. "The Washington Post" reported that exploit code for known critical security vulnerabilities in Internet Explorer was available for 284 days in 2006. In comparison, exploit code for known, critical security vulnerabilities in
HTTPS Elliptic curve Diffie–Hellman key exchange (ECDHE) are in 2013 the only ones known to have that property. Only 30% of Firefox, Opera, and Chromium Browser sessions use it, and nearly 0% of Apple's Safari and Microsoft Internet Explorer sessions. Among the larger internet providers, only Google supports PFS (State of September 2013). A certificate may be revoked before it expires, for example because the secrecy of the private key has been compromised. Newer versions of popular browsers such as Firefox, Opera, and Internet Explorer on Windows Vista implement the Online Certificate Status Protocol (OCSP) to verify that this is not