Internet Explorer Tracking Protection Lists, Check Before Installing

Martin Brinkmann
Feb 16, 2011
Internet Explorer

Tracking Protection is a new feature introduced in Internet Explorer 9. It is a mix of an ad blocker and privacy tool that can block scripts automatically on web pages. Users can create their own custom lists or install lists directly from an official Microsoft website (see Internet Explorer 9 Tracking Protection Lists for all the details on that). Microsoft is currently offering five different lists created by four companies on the Tracking Protection Lists page.

Most users probably start installing the lists right away without taking a closer look at them first. To be honest, I did the same the first time I discovered the list.

That however was a huge mistake as it turned out that not all lists are doing what they are supposed to be doing. You see, protection lists can not only block elements but also allow them.

The lists use a plain text format. Internet Explorer 9 users can take a look at their contents by going to tools > safety > Tracking Protection. A right-click on installed lists and the selection of More Information opens the list of scripts that are blocked or allowed.

As you can see from the sample above, the syntax is -d for blocking a domain and +d for allowing it. Ed Bott over at ZDnet discovered a puzzling discrepancy.

ie9 tracking protection

The TRUSTe protection list does not block a single domain. It instead whitelists nearly 4000 domains so that they ads and contents are still able to track users and display advertisements to them. Even worse, the allow parameter has a higher priority than the block parameter which means that those sites are not affected if they are blocked by other lists. Among the domains are Facebook, Microsoft domains, Yahoo, Zonealarm and other high profile website.

TRUSTe mentions on their website that the list has been designed " to block companies that offer poor privacy protection, while ensuring that trustworthy companies who protect their privacy can continue to provide them with a richer, more personalized browsing experience". For now, it is all about allowing companies and not about blocking. This might change in the future. For now it is safe to say that privacy conscious users should stay away from that list.

Easylist, another Tracking Protection List, lists whitelisted domains as well. The list blocks almost 2200 domains and allows 47. Still, it appears that some privacy related entries are whitelisted.

There does not seem to be a way to check the lists before they are installed in Internet Explorer 9. Some providers offer direct links to their lists on their web pages while others do not. That leaves users with the option to verify lists manually whenever they are added to the web browser.

The lists need to be checked regularly as well as they are automatically updated by the Internet Explorer browser. It is theoretically possible to offer a clean blocking list in the beginning to add allowed sites or remove blocked sites in a later update. It is not clear yet how updates process.


Previous Post: «
Next Post: «


  1. joseph said on December 7, 2012 at 8:35 am

    Thanks for this post, i will try that.

    1. Anonymous said on August 14, 2013 at 10:41 pm

      So, yay or nay? Any opinion on giving the upload of TPL a thumbs up or thumbs down?

  2. Taomyn said on February 16, 2011 at 3:34 pm

    Yup, I commented this when you blogged about the lists here:

    The only one I had experience up to then was EasyList with AdBlock Plus as they do the same in their ABP subcriptions, and their excuse is to stop breaking certain sites. I totally don’t believe them after they have done it here as well.

    I regularly manually go through EaslyList in ABP searching for @@ and then disabling the rule. Not fun.

  3. Mushaf said on February 16, 2011 at 1:19 pm

    If the lists blocked everything how would Microsoft track Google then?

    First I expected the Tracking Protection feature to be similar as Opera’s content blocker (urlfilter) lists. But with no surprise I noticed that it’s not even closer to that. Now it appears that some of the lists there are to allow scripts, not to block them (although I didn’t try any other list except EasyList).

Leave a Reply

Check the box to consent to your data being stored in line with the guidelines set out in our privacy policy

We love comments and welcome thoughtful and civilized discussion. Rudeness and personal attacks will not be tolerated. Please stay on-topic.
Please note that your comment may not appear immediately after you post it.