Microsoft’s new Chromium Edge browser packs several privacy control features. These features help you to prevent third parties from tracking your browsing sessions. The new capabilities differentiate Microsoft Edge from Google Chrome and other browsers.
Notably, it turned out to be one of the reasons that users are more inclined towards the new Edge experience. Now Google is planning to bring one of Edge’s exclusive features to Chromium Edge. The new feature will allow you to disable automatic Windows Authentication on Google Chrome, while you are using Incognito mode.
Chrome is planning to match Edge by disabling automatic Windows authentication while Incognito. pic.twitter.com/k1aH0PciEv
— Eric Lawrence 🎻 (@ericlaw) November 29, 2019
At the moment, Chrome controls the Windows Integrated Authentication feature in two ways. You can either use the corresponding flag “EnableAmbientAuthenticationInIncognito” or a policy named “AmbientAuthenticationInPrivateModesEnabled” to enable/disable the feature.
As a matter of fact, it is an enterprise feature and the majority of users don’t need this functionality. However, the flag is set to enabled by default. Here’s how Google explains the issue in a bug report:
The overwhelming majority of users don’t need this, and it just adds unnecessary attack surface. So, let’s just put it behind a policy so that the enterprises that need it can explicitly turn it on.
No ETA On The Change Yet
Google engineers are working to address this issue and a change would be implemented very soon. For those who don’t know about Integrated Windows Authentication, here is a brief overview. The functionality basically allows Google Chrome to access your login credentials.
Integrated Windows Authentication is meant to reduce complexity for Chrome users while using web-based applications. However, you don’t really want your browser to log in automatically into a particular website while using Incognito mode.
The change request is currently in the works and unfortunately, there is no ETA on when it will come out. Probably, you may need to wait for a couple of months until Google completes the implementation and testing process.
In addition, Google plans to coordinate with enterprise users before shipping. This communication is important so that they have enough time to update policies. IT administrators would need to manually enable Windows Integrated Authentication for Google Chrome.