Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Context: I typically have multiple tabs/instances of Firefox running at the same time; most of these are over plain unencrypted webpages. Often, however, I remember I need to purchase an item, or do some other financial transaction, which involves going to an encrypted webpage. However, for the sake of efficiency, I also often do not close all other browser tabs/windows.

Question: Does this diminish the security I get from my single encrypted tab I've got open? Is there a greater conceptual browser/internet security framework I need to understand here?

(I am running the latest version of Firefox, on Windows XP.)

share|improve this question
up vote 3 down vote accepted

The best way to protect yourself in such scenarios is to use a browser that supports Sandboxing.

Sandboxing is running each individual tab in a separate process and not allowing them to communicate.

There are two browsers that I have seen that implement this technique natively, IE9 and Chrome.

For FF there is a plugin to achieve this, once you have sandboxing enabled or you are running a browser that implements this, then you can truly feel "secure".

The plugin for FF is Sandboxie and it achieves what IE9 and Chrome do natively.

Otherwise, there is a possibility to do cross-tab stuff and compromise the information.

My field is not IT Security but I am pretty sure this is just common sense.

share|improve this answer

<not a security expert>

It's safe. A website cannot see what you are doing in other tabs or windows. (Except perhaps if both have the same website open.)

Of course, there is a possibility of a security hole in the browser, but all the cross-tab ones have been fixed already.

</not a security expert>

share|improve this answer
At one time FF did have javascripting vulnerabilities which would allow some cross tab spoofing. Without a full sandbox between tabs via different processes as IE8/9 and Chrome do than there can be an opening for possible issues. – edusysadmin Mar 19 '11 at 13:58
Thanks for the link, @grawity! Is there a specific section(s) you recommend I check out? – drapkin11 Mar 30 '11 at 14:58

Was going to leave this as a comment under @Grawity's post, but thought it should be an answer. Unless you sandbox, then there are a number of ways a website can impact you if you have another site open as well. I would recommend always closing browsers before carrying out online transactions (ebay, online banking etc)

IE9 and Chrome seem safe currently - all things change so don't rely on this remaining true:-)

caveat - I am a security professional, and pretty pessimistic about these things, so I always recommend doing the simple things which help!

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.