markdown:
# Authenticode
|
|Archived content. No warranty is made as to technical accuracy. Content may contain URLs that were valid when originally published, but now link to sites or pages that no longer exist.
##### On This Page
[What Is Authenticode?](#XSLTsection122121120120)
[Digital Certificates Overview](#XSLTsection123121120120)
[Internet Explorer and Authenticode](#XSLTsection124121120120)
[Common Authenticode Questions](#XSLTsection125121120120)
[Summary](#XSLTsection126121120120)
### What Is Authenticode?
Today's Web sites provide not only a rich experience for users but also the possibility of unwittingly downloading malicious code. With increasingly active content on the Internet, end users often must decide whether or not to download code over the Internet. However, end users cannot really tell what a piece of software will do until they've downloaded it to their computers.
Unlike in the retail environment, software on the Internet isn’t labeled or shrink-wrapped. Therefore, end users don't know for sure who published a piece of software on the Internet. They also don't know whether the code has been tampered with. As a result, end users take on a certain amount of risk when downloading Java applets, plug-ins, Microsoft® ActiveX™ controls, and other executables over the Internet.
Internet Explorer (IE) uses Authenticode™ technology and its underlying
[code signing](https://msdn.microsoft.com/workshop/security/authcode/intro_authenticode.asp) mechanisms to help address this problem for end users. While not guaranteeing bug-free code, Authenticode identifies the publisher of signed software and verifies that it hasn't been tampered with, before users download software to their PCs. As a result, end users can make a more informed decision as to whether or not to download code.
The security methods used to support this proposal rely on tested and proven technology. Authenticode relies on digital certificates and is based on specifications that have been used successfully in the industry for some time, including Public Key Cryptography Standards (PKCS) #7 (encrypted key specification), PKCS #10 (certificate request formats), X.509 (certificate specification), and Secure Hash Algorithm (SHA) and MD5 hash algorithms.
This paper discusses Microsoft’s Authenticode technology, digital certificates, and IE’s handling of potentially dangerous content
### Digital Certificates Overview
Although users of Authenticode don’t have to master digital authentication to benefit from the technology, it’s helpful to understand the basic concepts. Digital certificates are electronic credentials that verify an individual's or an organization's identity on the Web. The identity of the digital certificate owner is bound to a pair of electronic keys that can be used to encrypt and sign digital information, assuring that the keys actually belong to the person or organization specified.
Digital certificates contain at least the following information:
-
Owner's public key
-
Owner's name or alias
-
Expiration date of the digital certificate
-
Serial number of the digital certificate
-
Name of the certification authority that issued the digital certificate
-
Digital signature of the certification authority that issued the digital certificate
Digital certificates may also contain other user-supplied information, including:
-
Postal address
-
Email address
-
Basic registration information (country/region, postal code, age, and gender)
**Certificate Authority**
Digital certificates are authenticated, issued, and managed by a trusted third party called a Certificate Authority (CA). The CA must provide a combination of three essential elements: technology, such as security protocols and standards, secure messaging, and cryptography; infrastructure, including secure facilities, customer support, and redundant systems; and practices, including a defined model of trust and a legally binding framework for subscriber activities and disputes. In short, a CA must be a trusted online service operating 24 hours a day, 7 days a week, on a global basis. In addition to obtaining digital certificates from commercial CAs, users can also implement certificate servers such as Microsoft Certificate Server.
Commercial CAs issue digital certificates verifying the electronic identity of individuals and organizations on the Web. The CAs' primary responsibility is to confirm the identity of those seeking a digital certificate, thus ensuring the validity of the identification information contained in the digital certificate.
CAs perform the following types of services:
-
Provide, manage, and renew digital certificates
-
Authenticate the identities of individuals and organizations
-
Verify the registrations of individuals and organizations
-
Publish and maintain a Certificate Revocation List (CRL) of all digital certificates that the CA has revoked
-
Handle legal and liability issues for broken security
Many commercial CAs offer certificate services for Microsoft products, as well as a wide range of other certificate services. For a current list of CAs that support Microsoft products, visit
[http://www.microsoft.com/security/](https://www.microsoft.com/security/) . **Types of Digital Certificates**
Commercial CAs issue various types of digital certificates, such as:
-
Personal certificates for individuals to digitally sign communications and ensure secure transactions over the Internet and intranet
-
Client and server certificates for managing secure transactions between clients and servers
-
Software publisher certificates for individuals who digitally sign their software
-
Software publisher certificates for commercial software publishers who digitally sign their software
CAs can also issue many other types of certificates. Each CA operates within the aegis of its Certification Practices Statement (CPS). It's a good idea to visit the CA's Web site and read the CPS to understand the certificates issued and the CA's operating procedures.
**Digital Certificate Uses**
Digital certificates form the basis for secure communication and client and server authentication on the Web. Digital certificates can be used to:
-
Encrypt secure communication channels between client machines and the servers on the Web
-
Verify the identity (user authentication) of clients and servers for secure communication channels between clients and servers on the Web
-
Encrypt messages for secure Internet email communications
-
Verify the authorship of Internet email messages
-
Sign executable code to be downloaded on the Web
-
Verify the source and integrity of signed executable code downloaded from the Web
**Digital Certificate Considerations for the Systems Administrator **
You can install certificates and configure certificate settings for IE to control secure email communications, the downloading of active content, and user authentication for clients and servers. Systems administrators can use the
[Internet Explorer Administration Kit (IEAK) ](https://www.microsoft.com/technet/prodtechnol/ie/ieak/default.mspx)Configuration Wizard to specify certificate configurations for the custom packages of IE they deploy in user groups. The IEAK Profile Manager can be used to manage certificate configurations for user groups through IE’s automatic browser configuration feature.
Instead of obtaining all digital certificates from commercial CAs, you can implement a certificate server such as Microsoft Certificate Server to manage the issuance, renewal, and revocation of industry-standard digital certificates for your users. They can use these digital certificates in conjunction with servers that support Secure Sockets Layer (SSL) or Private Communications Technology (PCT) to build a secure Web infrastructure for the Internet or intranet. For large organizations with complex Web needs, certificate servers offer many advantages over commercial CAs, including total control over certificate management policies and lower costs. Signed code is treated differently than unsigned code in IE.
### Internet Explorer and Authenticode
When IE downloads potentially dangerous content, it checks to see whether the code is digitally signed by a trusted certificate. Depending on your browser Security setting (High, Medium, Medium-Low, Low, or Custom) for the zone the content is originating from and the success or failure of the Authenticode verification process, the browser determines whether or not to automatically run the content. In IE, Security settings are found under Tools, Internet Options. With Security set to High, no potentially dangerous content will be run, signed or unsigned. IE’s default level of security for the Internet zone is Medium. Moderate levels of security either prompt the user to allow or deny the content’s activation, or automatically deny unsafe and unsigned content. When prompted to allow or deny signed content, the user is allowed to inspect the signer’s digital certificate. You can configure Security levels for each security zone.
#### Security Zones Overview
Zone security is a system that allows the user or systems administrator to divide into groups the Web content a browser can visit. This Web content can be anything from an HTML file, a graphic, an ActiveX control, a Java applet, or an executable file. Each group, or
*zone,* then has a security level assigned to it. In this way, security zones control users' access to Web sites, depending on the zone in which the site is located and the level of trust assigned to each zone. IE provides the following predefined security zones (see Figure 1):
-
**Internet zone.**All sites on the Internet that aren’t in the Trusted Sites or Restricted Sites zones are included in this zone. The default security level is Medium.
-
**Local Intranet zone.**This zone includes all sites inside an organization's firewall (for computers connected to a local network). The Local Intranet zone is also home to Web applications that need access to the user's hard disk. The default security level is Medium-Low.
-
**Trusted Sites zone.**This is the zone where you specify Internet sites you know you can trust. These sites might include corporate subsidiaries or perhaps the Web site of a trusted business partner. The default security level is Low.
-
**Restricted Sites zone.**This is the zone where you specify sites that you know you cannot trust. The default security level is High. **Figure 1: Security zones**
A fifth zone, Local Machine, exists but isn’t included in the user interface and isn’t configurable through the security options. Local Machine can only be configured in the registry. Local Machine includes most content on the local disk, excluding cached classes in the Temporary Internet Files folder and classes that are signed with restricted privileges. This area forms a completely trusted zone, to which few or no security restrictions apply. Systems administrators can also exclude network and other drives by explicitly mapping them into other zones, if necessary.
Using security zones, it's easy to provide the appropriate level of security for the various types of Web content that users are likely to encounter. You can accept the default setting for each zone; change the setting to another of the preset High, Medium, and Low choices; or use the Custom setting for more precise control.
For example, it's likely that you fully trust sites on your company's intranet, so you probably want to allow all types of active content to run there. Simply set the Local Intranet zone to a low level of security. You probably don't feel as confident about sites on the Internet, so you can assign the entire Internet zone a higher level of security to prevent active content from being run and code from being downloaded to your computer. However, if there are specific sites you trust, you can place individual URLs or entire domains in the Trusted Sites zone. Other sites on the Internet are known to be sources of potentially harmful Web content, so you can choose to place the highest restrictions on those sites.
#### Zone Operations
When an HTML page is opened, a DLL called Urlmon.dll is used to determine the zone from which it was loaded. To do this, two things happen. First, Urlmon.dll checks to see whether a proxy server was used to get the HTML page; if so, Urlmon.dll automatically knows that the page is from the Internet. Next, it checks the registry to see whether the page is from a designated Trusted or Untrusted location, and the security zone is set appropriately. If no proxy server is involved, the URL is then parsed to determine where the page comes from.
You can find all of the zone security settings in two registry keys:
-
**HKEY_CURRENT_USER\Software\Microsoft\Windows \CurrentVersion\InternetSettings\ZoneMap**
and
-
**HKEY_CURRENT_USER \Software\Microsoft\Windows \CurrentVersion\InternetSettings\Zones**
The
**ZoneMap** keys contain the list of trusted and untrusted (restricted) Web sites, domains, and protocols. The **Zones** key contains the actual zones and the security settings that apply to each zone.
#### Setting Up Security Zones
Users can specify the sites included in the Local Intranet, Restricted Sites, and Trusted Sites security zones. The Internet zone comprises all Web sites not included in any of the other zones.
**Note:** Web content can be addressed either by Domain Name System (DNS) name or by IP address. For sites that use both, it’s important to configure both references to the same zone. In common cases, the Local Intranet sites are identifiable by either local names or by IP addresses in the proxy bypass list. All other names and IP addresses would be mapped to the Internet zone. However, if a site name is entered into the Trusted Sites or Restricted Sites zone site list, but its IP address range isn't, then the site may be treated as part of the Internet zone if the IP address accesses it. **Local Intranet Zone**
To be secure, it’s imperative that you set up the Local Intranet zone in conjunction with the proxy server and firewall configurations. All sites in the zone should be inside the firewall, and proxy servers should be configured so that they don’t allow an external DNS name to be resolved to this zone. Configuring the client zone security requires a detailed knowledge of the existing network configuration, proxy servers, and secure firewalls.
By default, the Local Intranet zone consists of local domain names and the addresses of any proxy exceptions. You should confirm that these settings are indeed secure for the installation, or adjust the settings to be secure. When setting up the zone, you can specify which categories of URLs should be considered. See the Local intranet settings in Table 1. You can also add specific sites to the zone.
**Table 1 Local intranet settings**
|
|
Option
|
|
Description
|
||
|
Includes all sites not included in other zones. Intranet sites have names that don’t include periods inside the URL (for example, http:
|
||
|
Includes all sites that bypass the proxy server. Typical intranet configurations use a proxy server to access the Internet with a direct connection to intranet servers. This setting uses this kind of configuration information to distinguish intranet from Internet content for purposes of zones. If the proxy server is otherwise configured, you should deselect this option and select other options to designate intranet zone membership. In systems without a proxy server, this setting has no effect.
|
||
|
Includes all network Universal Naming Convention (UNC) paths. Network paths (for example, \\local\file.txt) are typically used for local network content that should be included in the Local Intranet zone. If some network paths shouldn’t be in the Local Intranet zone, you should deselect this option and select other options to designate membership. For example, in certain Common Internet File System (CIFS) configurations, a network path can reference Internet content.
**Note:** If some parts of your intranet are less secure or otherwise not trustworthy, you can exclude them from this zone by assigning them to the Restricted Sites zone.
Once you’ve checked that the Local Intranet zone is secure, you may want to change the zone's security level to Low to allow a wider range of operations and make the Web pages more functional. You can also adjust individual security settings in the
**Custom Settings**. **Restricted and Trusted Sites Zones**
The Restricted Sites and Trusted Sites zones are where you can assign specific Web sites that you trust more or less than those in the Internet zone or the Local Intranet zone.
The Trusted Sites zone is assigned a Low security level setting by default. It’s intended for highly trusted sites, such as companies with which you frequently do business, and is sometimes known as an extranet. If you assign a site to the Trusted Sites zone, the site will be allowed to perform more powerful operations. Also, IE will require the user to make fewer security decisions. Add a site to this zone only if you trust all of its content never to do anything harmful to the user's computer. For the Trusted Sites zone, it’s strongly recommended that you use the HTTP over SSL (HTTPS) protocol or otherwise ensure that connections to the site are secure.
The Restricted Sites zone is assigned a High security level setting by default. This zone is designed for the rare case of a site you don't trust. If you assign a site to the Restricted Sites zone, the site will be allowed to perform only minimal, very safe operations. Due to the performance restrictions necessary for this extremely high level of security, some Web pages in this zone may not function properly.
**IE’s Security Levels**
As Table 2 shows, IE has five security levels that can be applied against the different zones.
**Table 2 IE security levels**
|
|
Security Level
|
|
Description
|
||
|
Excludes content that could damage users' computers.
|
||
|
Default setting for the Internet zone. Warns users and queries whether they want to run potentially damaging content.
|
||
|
Default setting for the Local Intranet zone.
|
||
|
Runs potentially damaging content without notifying users.
|
||
|
Specifies custom settings for zones.
The default Low, Medium-Low, Medium, and High security levels are detailed in Table 3. You can accept the defaults or configure custom zone settings to meet your needs.
**Table 3 Security options details **
|
|
Security Option
|
|
Low Level
|
|
Medium-Low Level
|
|
Medium Level
|
|
High Level
|
|
Download signed ActiveX controls
|
|
Enable
|
|
Prompt
|
|
Prompt
|
|
Disable
|
|
Download unsigned ActiveX controls
|
|
Prompt
|
|
Disable
|
|
Disable
|
|
Disable
|
|
Initialize and script ActiveX controls not marked as safe
|
|
Prompt
|
|
Disable
|
|
Disable
|
|
Disable
|
|
Run ActiveX controls and plug-ins
|
|
Enable
|
|
Enable
|
|
Enable
|
|
Disable
|
|
Script ActiveX controls marked safe for scripting
|
|
Enable
|
|
Enable
|
|
Enable
|
|
Disable
|
|
File download
|
|
Enable
|
|
Enable
|
|
Enable
|
|
Disable
|
|
Font download
|
|
Enable
|
|
Enable
|
|
Enable
|
|
Prompt
|
|
Java permissions
|
|
Low Safety
|
|
Medium Safety
|
|
High Safety
|
|
Disable Java
|
|
Access data sources across domains
|
|
Enable
|
|
Prompt
|
|
Disable
|
|
Disable
|
|
Allow META REFRESH
|
|
Enable
|
|
Enable
|
|
Enable
|
|
Disable
|
|
Display mixed content
|
|
Prompt
|
|
Prompt
|
|
Prompt
|
|
Prompt
|
|
Don’t prompt for client certificate selection when no certificates or only one certificate exists
|
|
Enable
|
|
Enable
|
|
Disable
|
|
Disable
|
|
Drag and drop or copy and paste files
|
|
Enable
|
|
Enable
|
|
Enable
|
|
Prompt
|
|
Installation of desktop items
|
|
Enable
|
|
Prompt
|
|
Prompt
|
|
Disable
|
|
Launching programs and files in an IFRAME
|
|
Enable
|
|
Prompt
|
|
Prompt
|
|
Disable
|
|
Navigate sub-frames across different domains
|
|
Enable
|
|
Enable
|
|
Enable
|
|
Disable
|
|
Software channel permissions
|
|
Low safety
|
|
Medium safety
|
|
Medium safety
|
|
High safety
|
|
Submit nonencrypted form data
|
|
Enable
|
|
Enable
|
|
Prompt
|
|
Prompt
|
|
Userdata persistence
|
|
Enable
|
|
Enable
|
|
Enable
|
|
Disable
|
|
Active scripting
|
|
Enable
|
|
Enable
|
|
Enable
|
|
Disable
|
|
Allow paste operations via script
|
|
Enable
|
|
Enable
|
|
Enable
|
|
Disable
|
|
Scripting of Java applets
|
|
Enable
|
|
Enable
|
|
Enable
|
|
Disable
|
|
User Authentication—Logon
|
|
Automatic logon with current username and password
|
|
Automatic logon only in Intranet zone
|
|
Automatic logon only in Intranet zone
|
|
Prompt for user name and password
**Note:** Security options, default settings, and locations vary slightly according to IE version.
Administrators can also use the
[IEAK](https://www.microsoft.com/technet/prodtechnol/ie/ieak/default.mspx) Configuration Wizard and the IEAK Profile Manager to configure and manage security zones for custom packages to be deployed in user groups.
#### Changing Security Levels
If you choose not to accept the default security levels for the preset zones in IE, you can easily assign a different level of security — High, Medium, Medium-Low, or Low—to any zone.
**Note:** If you want to customize the security level for a zone, select **Custom Level (for expert users)**, and choose settings that suit your needs. For more information, see the next section, “Customizing Security Zones.”
#### Customizing Security Zones
The
**Custom Level** option on the **Security** tab gives advanced users and systems administrators additional control over security settings. Again, the options for customizing security zones are the same whether you access them from IE, the IEAK Configuration Wizard, or the IEAK Profile Manager (with the exception of some Java controls).
#### Configuring Custom Settings
The custom security options for IE are grouped into the following categories:
-
ActiveX Controls and Plug-ins
-
Downloads
-
Java
-
Miscellaneous
-
Scripting
-
User Authentication
The following sections describe the security options for each security category.
**ActiveX Controls and Plug-ins**
These options dictate how ActiveX controls and plug-ins are downloaded, run, and scripted.
**Note:** If an ActiveX control is downloaded from a site different from the page on which it’s used, the more restrictive of the two sites' zone settings will be applied. For example, if a user is accessing a Web page within a zone that’s set to enable a download, but the code is downloaded from another zone that’s set to prompt a user first, the prompt setting is used. **Download signed ActiveX controls**
This option determines whether users may download signed ActiveX controls from a page in the zone. The settings for this option are:
-
**Enable**, to download signed controls without user intervention.
-
**Prompt**, to query the user whether to download controls signed by publishers who aren't trusted, but still silently download code signed by trusted publishers.
-
**Disable**, to prevent signed controls from downloading. **Download unsigned ActiveX controls**
This option determines whether users may download unsigned ActiveX controls from the zone. Such code is potentially harmful, especially when coming from an untrusted zone. The settings for this option are:
-
**Enable**, to run unsigned controls without user intervention.
-
**Prompt**, to query users to choose whether to allow the unsigned control to run.
-
**Disable**, to prevent unsigned controls from running. **Initialize and script ActiveX controls not marked as safe**
This option determines whether ActiveX control object safety is enforced for pages in the zone. Object safety should be enforced unless all ActiveX controls and scripts that might interact with pages in the zone can be trusted. The settings for this option are:
-
**Enable**, to override object safety. ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting isn’t recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the **Script ActiveX controls marked safe for scripting**option.
-
**Prompt**, to attempt to enforce object safety. However, if the ActiveX control cannot be made safe for untrusted data or scripts, then the user is queried whether to allow the control to be loaded with parameters or scripted.
-
**Disable**, to enforce object safety for untrusted data or scripts. ActiveX controls that cannot be made safe aren’t loaded with parameters or scripted. **Run ActiveX controls and plug-ins**
This option determines whether ActiveX controls and plug-ins can be run on pages from the specified zone. The settings for this option are:
-
**Enable**, to run controls and plug-ins without user intervention.
-
**Prompt**, to query users to choose whether to allow the controls and plug-ins to run.
-
**Disable**, to prevent controls and plug-ins from running. **Script ActiveX controls marked safe for scripting**
This option determines whether an ActiveX control marked safe for scripting can interact with a script. The settings for this option are:
-
**Enable**, to allow script interaction without user intervention.
-
**Prompt**, to query users to choose whether to allow script interaction.
-
**Disable**, to prevent script interaction.
Note that safe-for-initialization controls loaded with PARAM tags are unaffected by this option. This option is ignored when
**Initialize and script ActiveX controls that are not marked safe** is set to **Enable**, because the setting bypasses all object safety. You cannot script unsafe controls while blocking the scripting of the safe ones. **Downloads**
These options specify how IE handles downloads.
**File download**
This option controls whether file downloads are permitted from the zone. Note that the zone of the page with the link causing the download determines this option, not the zone from which the file is delivered. The settings for this option are:
-
**Enable**, to allow files to be downloaded from the zone.
-
**Disable**, to prevent files from being downloaded from the zone. **Font download**
This option determines whether pages of the zone may download HTML fonts. The settings for this option are:
-
**Enable**, to download HTML fonts without user intervention.
-
**Prompt**, to query users to choose whether to allow HTML fonts to download.
-
**Disable**, to prevent HTML fonts from downloading. **Java**
These options control the permissions that are granted to Java applets when they’re downloaded and run in this zone. You can specify:
-
The maximum permission level granted to signed applets downloaded from the zone.
-
The permissions granted to unsigned applets downloaded from the zone.
-
The permissions granted to scripts on pages in the zone that call into applets.
**Note:** If a Java applet is downloaded from a different site than the page on which it’s used, the more restrictive of the two sites' zone settings will be applied. For example, if a user is accessing a Web page within a zone that’s set to allow a download, but the code is downloaded from another zone that’s set to prompt a user first, then the prompt setting is used. **Java permissions**
The settings for this option are:
-
**Custom**, to control permissions settings individually. To view and change custom Java permissions for each security zone, use the IE **Custom Java Security**dialog box. You can also use the IEAK Configuration Wizard and IEAK Profile Manager to edit the advanced Java permissions for each security zone.
-
**Low safety**, to enable applets to perform all operations.
-
**Medium safety**, to enable applets to run in their *sandbox*(an area in memory outside of which the program cannot make calls), plus capabilities such as *scratch space*(a safe and secure storage area on the client computer) and user-controlled file I/O.
-
**High safety**, to enable applets to run in their sandbox.
-
**Disable Java**, to prevent any applets from running. **Miscellaneous**
These options control whether users can submit nonencrypted form data, launch applications and files from IFRAMEs, install Active Desktop items, drag files, or copy and paste files a zone.
**Access data sources across domains**
This option controls whether a web page can call data sources from other domains, which is not uncommon. The settings for this option are:
-
**Enable**, to allow data sources from other domains automatically.
-
**Prompt**, to query users on whether to allow data sources to be used from other domains.
-
**Disable**, to prevent data sources from other domains from being used. **Allow META REFRESH**
This option controls whether a web page can redirect your browser to another page after a predefined period of time. The settings for this option are:
-
**Enable**, to allow Meta refreshes.
-
**Disable**, to prevent Meta refreshes. **Display mixed content**
This option controls whether or not IE will display a web page containing content from both secure (https) and nonsecure (http) content. The settings for this option are:
-
**Enable**, allow web page with mixed content to display.
-
**Prompt**, query user on whether to allow web paged with mixed content to display.
-
**Disable**, will not allow web pages with both secure and nonsecure content to display. **Don’t prompt for client certificate selection when no certificates exist or only one certificate exists**
This option controls whether or not a web site requesting client certificate authentication will prompt the user to select a client certificate to authenticate their identity when no or only one certificate exists. The settings for this option are:
-
**Enable**, if none or only one certificate exists web site requesting client certificate authentication will not prompt user to select a client authentication certificate.
-
**Disable**, web site requesting client certificate authentication will prompt user to select certification even if none or only one certificate exists. **Drag and drop or copy and paste files**
This option controls whether users can drag files or copy and paste files from a source within the zone. The settings for this option are:
-
**Enable**, to drag files or copy and paste files from this zone without user intervention.
-
**Prompt**, to query users to choose whether to drag or copy files from this zone.
-
**Disable**, to prevent dragging files or copying and pasting files from this zone. **Installation of desktop items**
This option controls whether users can install Active Desktop items from this zone. The settings for this option are:
-
**Enable**, to install desktop items from this zone without user intervention.
-
**Prompt**, to query users to choose whether to install desktop items from this zone.
-
**Disable**, to prevent desktop items from this zone from being installed. **Launching programs and files in an IFRAME**
This option controls whether applications may be run and files may be downloaded from a floating frame (IFRAME) reference in the HTML of the pages in this zone. The settings for this option are:
-
**Enable**, to run applications and download files from IFRAMEs on the pages in this zone without user intervention.
-
**Prompt**, to query users to choose whether to run applications and download files from IFRAMEs on the pages in this zone.
-
**Disable**, to prevent applications from running and files from downloading from IFRAMEs on the pages in this zone. **Navigate sub-frames across different domains**
This option controls whether a web page displayed in a sub-frame can launch from a domain different than the calling web page. The settings for this option are:
-
**Enable**, allow web pages to call sub-frame pages originating from different domains.
-
**Prompt**, query user to choose whether to allow sub-frames from other domains.
-
**Disable**, never allow a web page to call a sub-frame from a different domain. **Software channel permissions**
This option controls the permissions given to software distribution channels. The settings for this option are:
-
**Low safety**, to allow users to be notified of software updates by email, software packages to be automatically downloaded to users' computers, and software packages to be automatically installed on users' computers.
-
**Medium safety**, to allow users to be notified of software updates by email and software packages to be automatically downloaded to (but not installed on) users' computers.
-
**High safety**, to prevent users from being notified of software updates by email, software packages from being automatically downloaded to users' computers, and software packages from being automatically installed on users' computers. **Submit nonencrypted form data**
This option determines whether data on HTML forms on pages in the zone may be submitted. Forms sent with SSL encryption are always allowed; this setting only affects non-SSL form data submission. The settings for this option are:
-
**Enable**, to allow information using HTML forms on pages in this zone to be submitted without user intervention.
-
**Prompt**, to query users to choose whether to allow information using HTML forms on pages in this zone to be submitted.
-
**Disable**, to prevent information using HTML forms on pages in this zone from being submitted. **Userdata persistence**
This option controls whether or not a web page can store collected user data after the user leaves the web page. The settings for this option are:
-
**Enable**, allow web page to store persistent data.
-
**Disable**, deny a web page the ability to store persistent user data. **Scripting**
These options specify how IE handles scripts.
**Active scripting**
This option determines whether script code on pages in the zone is run. The settings for this option are:
-
**Enable**, to run scripts without user intervention.
-
**Prompt**, to query users to choose whether to allow the scripts to run.
-
**Disable**, to prevent scripts from running. **Allow paste operations via script**
This option controls whether or not a web page script can copy and paste data to the Windows Clipboard application. Several security vulnerabilities are possible if this setting is enabled. The settings for this option are:
-
**Enable**, allow a web site script to copy and paste data using the Windows clipboard application.
-
**Prompt**, query users to choose whether or not to allow a web site to utilize the Windows Clipboard to copy and paste data.
-
**Disable**, prevent web sites from using the Windows Clipboard. **Scripting of Java applets**
This option determines whether applets are exposed to scripts within the zone. The settings for this option are:
-
**Enable**, to allow scripts to access applets without user intervention.
-
**Prompt**, to query users to choose whether to allow scripts to access applets.
-
**Disable**, to prevent scripts from accessing applets. **User Authentication**
This option controls how HTTP user authentication is handled.
**Logon**
The settings for this option are:
-
**Anonymous logon**, to disable HTTP authentication and use the guest account only for CIFS.
-
**Prompt for user name and password**, to query users for user IDs and passwords. After a user is queried, these values can be used silently for the remainder of the session.
-
**Automatic logon only in Intranet zone**, to query users for user IDs and passwords in other zones. After a user is queried, these values can be used silently for the remainder of the session.
-
**Automatic logon with current user name and password**, to attempt logon using Windows NT® Challenge/Response (also known as NT LAN Manager—NTLM) authentication. If the server supports Windows NT Challenge/Response authentication, the logon uses the user's network username and password for logon. If the server doesn’t support Windows NT Challenge/Response authentication, the user is queried to provide the username and password.
IE’s security zones and settings allow a tremendous amount of flexibility when deciding which types of downloadable content to trust. The last section, “Common Authenticode Questions,” gives answers to commonly asked questions about Authenticode.
### Common Authenticode Questions
**If IE tells me that a piece of software hasn’t been signed, should I download it anyway? **
This is a decision that should be based on the end user’s own judgment. For instance, if the end user has downloaded software from a particular site before and believes that this software can be trusted not to have been tampered with or to behave maliciously, then the end user may decide to download code that hasn’t been signed (i.e., that doesn’t have a valid certificate associated with it). And if the end user knows nothing about the software or the site from which it originated, the end user may choose not to download this piece of software.
**Should I trust and download a piece of software just because it’s been signed? **
Again, this decision relies on the end user’s own judgment; however, the certificate provides end users with the data they need to make a more informed decision about this piece of software. If the end user has a great deal of trust in a particular software publisher, then the end user may decide to automatically download any software from this publisher through the settings provided in the Authenticode Security Technology dialog box.
**Does a personal certificate or a site certificate have anything to do with a software publisher certificate? **
Personal, site, and publisher certificates are all used to prove identity over the Internet; however, these certificates are used within different contexts. Your personal certificate identifies you to Web sites and allows you to access private or paid-for content over the Internet. A site certificate assures you of a Web site's identity and is used for secure communications between you and the Web site. A software publisher certificate, as mentioned previously, identifies the publisher of a piece of software and ensures that the software hasn't been tampered with after it has left the software publisher.
**How can I tell the difference between an individual publisher and a commercial publisher when IE presents me with a software publisher’s certificate? **
Before downloading a signed piece of software, IE identifies the issuer of the software publisher certificate as a CA for either individual or commercial publishers. IE further differentiates individual and commercial software publishers through the graphical presentation of the certificate to the end user in the Authenticode Security Technology dialog box.
**How can Authenticode be used within a corporate scenario? **
Using
[IEAK,](https://www.microsoft.com/technet/prodtechnol/ie/ieak/default.mspx) an administrator can preconfigure IE safety settings, thereby setting the default manner in which IE treats potentially unsafe code—for example, code that doesn’t have a valid software publisher certificate associated with it. In addition, through IEAK, the administrator can control which Options settings the user can change. Hence, the administrator can prevent unsigned software from being downloaded to end users’ PCs.
### Summary
Microsoft’s Authenticode technology ensures that software hasn’t been tampered with since the time it was digitally signed by its publisher. CAs are third parties that ensure that software authors are who they say they are. Authenticode-protected software establishes a reliable link to the publisher, which has contractually agreed that its software isn’t intentionally malicious. Without having to inspect the programming source code line by line, users are given a higher degree of trust not given by unsigned code. Users can assign different degrees of security trust to IE’s zones to accommodate acceptable levels of risk for their computing environment.

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"


markdown:
# Google phát hành bản cập nhật Android 2.3.3 cho Nexus S và Nexus One
Thảo luận trong '
[[Android] Nâng cấp Firmware](forums/android-nang-cap-firmware.280/)' bắt đầu bởi [Didu](members/didu.60686/), [23/2/11](threads/google-phat-hanh-ban-cap-nhat-android-2-3-3-cho-nexus-s-va-nexus-one.604657/).
Trả lời: 54, Xem: 12792.
Trang 3 / 3
Trang 3 / 3
Đang tải...
Thảo luận trong '
[[Android] Nâng cấp Firmware](forums/android-nang-cap-firmware.280/)' bắt đầu bởi [Didu](members/didu.60686/), [23/2/11](threads/google-phat-hanh-ban-cap-nhat-android-2-3-3-cho-nexus-s-va-nexus-one.604657/).
Trả lời: 54, Xem: 12792.

WARC-Type: response

Content-Type: application/http; msgtype=response

Cache-control: private, max-age=0

Set-Cookie: tt_session=fd764e05a498b6f12816b90ef1b3f001; path=/; domain=.tinhte.vn; secure; httponly

Connection: close

Server: nginx

X-Frame-Options: SAMEORIGIN

Vary: Accept-Encoding

Content-Type: text/html; charset=UTF-8


markdown:
# Khách sạn tại Waterford
## Tìm khách sạn tại Waterford
![ Hotels.com™ Rewards](https://a1.cdn-hotels.com/da/assets/s/44.0/images/brands/hcom/hcomrewards/logos/rewards-logo-purple-no-moon-vi_VN.png)
![ Hotels.com™ Rewards](https://a1.cdn-hotels.com/da/assets/s/44.0/images/brands/hcom/hcomrewards/logos/rewards-logo-white-no-moon-vi_VN.png)
## Đang được quan tâm tại Waterford
#### Khách sạn tại Waterford
- Đặt nhiều nhất
Quality Inn & Suites
108 người đã xem khách sạn này trong 1 giờ vừa qua
27 người đã xem khách sạn này trong 1 giờ vừa qua
#### Khách sạn trong phạm vi 10 km tại Waterford
232 người đã xem khách sạn này trong 1 giờ vừa qua
50 người đã xem khách sạn này trong 1 giờ vừa qua
35 người đã xem khách sạn này trong 1 giờ vừa qua
#### Khách sạn trong phạm vi 15 km tại Waterford
128 người đã xem khách sạn này trong 1 giờ vừa qua
115 người đã xem khách sạn này trong 1 giờ vừa qua
55 người đã xem khách sạn này trong 1 giờ vừa qua
41 người đã xem khách sạn này trong 1 giờ vừa qua
32 người đã xem khách sạn này trong 1 giờ vừa qua
## Khách sạn tại Waterford, Mỹ
Tại Hotels.com, bạn có thể tìm và so sánh giá phòng khách sạn tại Waterford để chọn khách sạn hoàn hảo cho chuyến đi của mình. Bất kể bạn đang lên kế hoạch cho một chuyến du lịch, kỳ nghỉ hè hay đi công tác tại Waterford, Hotels.com luôn có phòng phù hợp cho nhu cầu của bạn.

Cache-Control: max-age=0, no-cache, no-store

Pragma: no-cache

Content-Language: vi-VN

X-UA-Compatible: IE=Edge

Server: Application-Server


markdown:
# Khách sạn tại Thành phố Mumbai
## Tìm khách sạn tại Thành phố Mumbai
![ Hotels.com™ Rewards](https://a1.cdn-hotels.com/da/assets/s/44.0/images/brands/hcom/hcomrewards/logos/rewards-logo-purple-no-moon-vi_VN.png)
![ Hotels.com™ Rewards](https://a1.cdn-hotels.com/da/assets/s/44.0/images/brands/hcom/hcomrewards/logos/rewards-logo-white-no-moon-vi_VN.png)
## Đang được quan tâm tại Thành phố Mumbai
- Đặt nhiều nhất
Sofitel Mumbai BKC
279 người đã xem khách sạn này trong 1 giờ vừa qua
278 người đã xem khách sạn này trong 1 giờ vừa qua
144 người đã xem khách sạn này trong 1 giờ vừa qua
142 người đã xem khách sạn này trong 1 giờ vừa qua
132 người đã xem khách sạn này trong 1 giờ vừa qua
113 người đã xem khách sạn này trong 1 giờ vừa qua
105 người đã xem khách sạn này trong 1 giờ vừa qua
63 người đã xem khách sạn này trong 1 giờ vừa qua
41 người đã xem khách sạn này trong 1 giờ vừa qua
24 người đã xem khách sạn này trong 1 giờ vừa qua
![ Mumbai, India](https://a1.cdn-hotels.com/da/assets/s/44.0/images/common/core/dio/widget/1.gif)
![ Mumbai, India](https://a1.cdn-hotels.com/da/assets/s/44.0/images/common/core/dio/widget/1.gif)
Xem khách sạn tại Thành phố Mumbai trên bản đồ
## Địa danh
[Khu liên hợp Bandra Kurla](https://vi.hotels.com/de1710238/khach-san-gan-khu-lien-hop-bandra-kurla-thanh-pho-mumbai-an-o/) [Dhobitalao](https://vi.hotels.com/de1786486/khach-san-gan-dhobitalao-thanh-pho-mumbai-an-o/) [Đài kỷ niệm Gateway Ấn Độ](https://vi.hotels.com/de1672146/khach-san-gan-ai-ky-niem-gateway-an-o-thanh-pho-mumbai-an-o/) [Đại lộ Marine Drive](https://vi.hotels.com/de1689293/khach-san-gan-ai-lo-marine-drive-thanh-pho-mumbai-an-o/) [Saifee Hospital](https://vi.hotels.com/de1748620/khach-san-gan-saifee-hospital-thanh-pho-mumbai-an-o/) [High Street Phoenix Mall](https://vi.hotels.com/de1720738/khach-san-gan-high-street-phoenix-mall-thanh-pho-mumbai-an-o/) [Nhà ga Chhatrapati Shivaji](https://vi.hotels.com/de1689292/khach-san-gan-nha-ga-chhatrapati-shivaji-thanh-pho-mumbai-an-o/) [Hồ Powai](https://vi.hotels.com/de1672162/khach-san-gan-ho-powai-thanh-pho-mumbai-an-o/) [Bệnh viện Bombay](https://vi.hotels.com/de1723918/khach-san-gan-benh-vien-bombay-thanh-pho-mumbai-an-o/) [Prince Aly Khan Hospital](https://vi.hotels.com/de1748619/khach-san-gan-prince-aly-khan-hospital-thanh-pho-mumbai-an-o/) [Bệnh viện KEM](https://vi.hotels.com/de1720741/khach-san-gan-benh-vien-kem-thanh-pho-mumbai-an-o/) [Jaslok Hospital](https://vi.hotels.com/de1748617/khach-san-gan-jaslok-hospital-thanh-pho-mumbai-an-o/) [Bãi biển Aksa](https://vi.hotels.com/de1772524/khach-san-gan-bai-bien-aksa-thanh-pho-mumbai-an-o/) [Khu thương mại Hiranandani - Powai](https://vi.hotels.com/de1720739/khach-san-gan-khu-thuong-mai-hiranandani-powai-thanh-pho-mumbai-an-o/) [Bãi biển Versova](https://vi.hotels.com/de1672171/khach-san-gan-bai-bien-versova-thanh-pho-mumbai-an-o/) [Bệnh viện Lilavati](https://vi.hotels.com/de1692739/khach-san-gan-benh-vien-lilavati-thanh-pho-mumbai-an-o/) [Sở giao dịch Chứng khoán Bombay](https://vi.hotels.com/de1672139/khach-san-gan-so-giao-dich-chung-khoan-bombay-thanh-pho-mumbai-an-o/) [Bệnh viện Breach Candy](https://vi.hotels.com/de1743204/khach-san-gan-benh-vien-breach-candy-thanh-pho-mumbai-an-o/) [Cầu nối biển Bandra-Worli](https://vi.hotels.com/de1720734/khach-san-gan-cau-noi-bien-bandra-worli-thanh-pho-mumbai-an-o/) [Đường Grant](https://vi.hotels.com/de1706060/khach-san-gan-uong-grant-thanh-pho-mumbai-an-o/)
## Khách sạn tại Thành phố Mumbai, Ấn Độ
Tại Hotels.com, bạn có thể tìm và so sánh giá phòng khách sạn tại Thành phố Mumbai để chọn khách sạn hoàn hảo cho chuyến đi của mình. Bất kể bạn đang lên kế hoạch cho một chuyến du lịch, kỳ nghỉ hè hay đi công tác tại Thành phố Mumbai, Hotels.com luôn có phòng phù hợp cho nhu cầu của bạn.


markdown:
# Khách sạn gần Trung tâm mua sắm Ibn Battuta
## Tìm khách sạn ở Trung tâm mua sắm Ibn Battuta, Dubai, Các Tiểu Vương Quốc Ả Rập Thống Nhất
![ Hotels.com™ Rewards](https://a1.cdn-hotels.com/da/assets/s/44.0/images/brands/hcom/hcomrewards/logos/rewards-logo-purple-no-moon-vi_VN.png)
![ Hotels.com™ Rewards](https://a1.cdn-hotels.com/da/assets/s/44.0/images/brands/hcom/hcomrewards/logos/rewards-logo-white-no-moon-vi_VN.png)
## Đang được quan tâm tại Dubai
#### Khách sạn trong phạm vi 1 km từ Trung tâm mua sắm Ibn Battuta
- Đặt nhiều nhất
Mövenpick Hotel Ibn Battuta Gate - Dubai
370 người đã xem khách sạn này trong 1 giờ vừa qua
#### Khách sạn trong phạm vi 2 km từ Trung tâm mua sắm Ibn Battuta
17 người đã xem khách sạn này trong 1 giờ vừa qua
11 người đã xem khách sạn này trong 1 giờ vừa qua
Parkside Suites Discovery GardensChưa có nhận xét của khách
6 người đã xem khách sạn này trong 1 giờ vừa qua
#### Khách sạn trong phạm vi 3 km từ Trung tâm mua sắm Ibn Battuta
490 người đã xem khách sạn này trong 1 giờ vừa qua
Wyndham Dubai MarinaChưa có nhận xét của khách
157 người đã xem khách sạn này trong 1 giờ vừa qua
140 người đã xem khách sạn này trong 1 giờ vừa qua
Jannah Marina Bay SuitesChưa có nhận xét của khách
46 người đã xem khách sạn này trong 1 giờ vừa qua
39 người đã xem khách sạn này trong 1 giờ vừa qua
![ Dubai, United Arab Emirates](https://a1.cdn-hotels.com/da/assets/s/44.0/images/common/core/dio/widget/1.gif)
![ Dubai, United Arab Emirates](https://a1.cdn-hotels.com/da/assets/s/44.0/images/common/core/dio/widget/1.gif)
Xem khách sạn gần Trung tâm mua sắm Ibn Battuta trên bản đồ
## Địa danh
[Tháp Burj Dubai](https://vi.hotels.com/de1660638/khach-san-gan-thap-burj-dubai-dubai-cac-tieu-vuong-quoc-a-rap-thong-nhat/) [Trung tâm mua sắm Dubai](https://vi.hotels.com/de1686797/khach-san-gan-trung-tam-mua-sam-dubai-dubai-cac-tieu-vuong-quoc-a-rap-thong-nhat/) [Công viên và Bãi biển Jumeira](https://vi.hotels.com/de1660654/khach-san-gan-cong-vien-va-bai-bien-jumeira-dubai-cac-tieu-vuong-quoc-a-rap-thong-nhat/) [Trung tâm mua sắm của Các tiểu vương quốc](https://vi.hotels.com/de1660656/khach-san-gan-trung-tam-mua-sam-cua-cac-tieu-vuong-quoc-dubai-cac-tieu-vuong-quoc-a-rap-thong-nhat/) [Trung tâm Thành phố Deira](https://vi.hotels.com/de1637569/khach-san-gan-trung-tam-thanh-pho-deira-dubai-cac-tieu-vuong-quoc-a-rap-thong-nhat/) [Khu chợ Vàng](https://vi.hotels.com/de1660651/khach-san-gan-khu-cho-vang-dubai-cac-tieu-vuong-quoc-a-rap-thong-nhat/) [Trung tâm mua sắm Thành phố Wafi](https://vi.hotels.com/de1660659/khach-san-gan-trung-tam-mua-sam-thanh-pho-wafi-dubai-cac-tieu-vuong-quoc-a-rap-thong-nhat/) [Trung tâm Triển lãm và Hội nghị Quốc tế Dubai](https://vi.hotels.com/de1675467/khach-san-gan-trung-tam-trien-lam-va-hoi-nghi-quoc-te-dubai-dubai-cac-tieu-vuong-quoc-a-rap-thong-nhat/) [Nhánh sông Dubai](https://vi.hotels.com/de1660641/khach-san-gan-nhanh-song-dubai-dubai-cac-tieu-vuong-quoc-a-rap-thong-nhat/) [Naif Souq](https://vi.hotels.com/de1754057/khach-san-gan-naif-souq-dubai-cac-tieu-vuong-quoc-a-rap-thong-nhat/) [Trung tâm tài chính quốc tế Dubai](https://vi.hotels.com/de1688551/khach-san-gan-trung-tam-tai-chinh-quoc-te-dubai-dubai-cac-tieu-vuong-quoc-a-rap-thong-nhat/) [Công viên nước Wild Wadi](https://vi.hotels.com/de1660660/khach-san-gan-cong-vien-nuoc-wild-wadi-dubai-cac-tieu-vuong-quoc-a-rap-thong-nhat/) [Đài phun nước Dubai](https://vi.hotels.com/de1687611/khach-san-gan-ai-phun-nuoc-dubai-dubai-cac-tieu-vuong-quoc-a-rap-thong-nhat/) [Jumeirah Lake Towers](https://vi.hotels.com/de1692326/khach-san-gan-jumeirah-lake-towers-dubai-cac-tieu-vuong-quoc-a-rap-thong-nhat/) [Trung tâm mua sắm BurJuma](https://vi.hotels.com/de1675443/khach-san-gan-trung-tam-mua-sam-burjuma-dubai-cac-tieu-vuong-quoc-a-rap-thong-nhat/) [Trung tâm buôn bán Dubai Marina](https://vi.hotels.com/de1687762/khach-san-gan-trung-tam-buon-ban-dubai-marina-dubai-cac-tieu-vuong-quoc-a-rap-thong-nhat/) [Thành phố Thể thao Dubai](https://vi.hotels.com/de1660645/khach-san-gan-thanh-pho-the-thao-dubai-dubai-cac-tieu-vuong-quoc-a-rap-thong-nhat/) [Sân bay Dubai (XNB-Sân bay Dubai Bus Station)](https://vi.hotels.com/de1716606/khach-san-gan-san-bay-dubai-xnb-san-bay-dubai-bus-station-dubai-cac-tieu-vuong-quoc-a-rap-thong-nhat/) [Souk Madinat Jumeirah](https://vi.hotels.com/de1736294/khach-san-gan-souk-madinat-jumeirah-dubai-cac-tieu-vuong-quoc-a-rap-thong-nhat/) [Trung tâm Thương mại Dubai Festival City Mall](https://vi.hotels.com/de1686799/khach-san-gan-trung-tam-thuong-mai-dubai-festival-city-mall-dubai-cac-tieu-vuong-quoc-a-rap-thong-nhat/)
## Khám phá Trung tâm mua sắm Ibn Battuta
**Khách sạn gần Trung tâm mua sắm Ibn Battuta**- Hotels.com cung cấp lựa chọn khách sạn tốt nhất gần Trung tâm mua sắm Ibn Battuta với mức giá thấp cạnh tranh. So sánh các giá đặt phòng tốt nhất gần Trung tâm mua sắm Ibn Battuta và tận hưởng các ưu đãi phút chót. Đặt phòng ngay hôm nay với công cụ đặt phòng trực tuyến bảo mật của Hotels.com và mong chờ sự tiện nghi & chất lượng.


markdown:
[Tất cả các khách sạn tại Indian Shores, Florida, Mỹ](/search.do?destination-id=1496065&q-room-0-adults=2&q-rooms=1&q-room-0-children=0)
# Legacy Vacation Resorts-Indian Shores - St. Petersburg - Clearwater (và vùng phụ cận)
**Condo sát vịnh tại Indian Shores với bếp nhỏ**
- WiFi miễn phí và chỗ đậu xe miễn phí
### Tiện nghi, dịch vụ nổi bật
- 40 condo
- Gần bãi biển
- Hồ bơi ngoài trời
- Phòng tắm hơi
- Trung tâm dịch vụ văn phòng
- Máy điều hòa nhiệt độ
- Phòng giải trí/trò chơi có thưởng
- Máy vi tính
- Máy giặt tự động
- Khu lò nướng BBQ
- Quầy tiếp tân chỉ phục vụ trong thời gian giới hạn
### Lân cận
- Smugglers Cove Adventure Golf (0,5 km)
- Khu bảo tồn chim biển Suncoast (2,3 km)
- Công viên Thiên niên kỷ Boca Ciega (4,8 km)
- Công viên Sand Key (12,1 km)
- Công viên Pier 60 (14,9 km)
### Tiện nghi, dịch vụ
- Bếp nhỏ
- Dụng cụ nấu nướng, bát dĩa, dao nĩa
- Lò vi sóng
- Tủ lạnh
- TV
- Trang thiết bị giặt ủi
My family and I enjoy the place.
it was great until we got back home from vacation and left my clothes in one of the…
[Xem tất cả 147 nhận xét tại Hotels.com](/ho224520-tr/) ![](https://www.tripadvisor.com/img/cdsi/partner/transparent_pixel-11419-1.gif)
## Legacy Vacation Resorts-Indian Shores - St. Petersburg - Clearwater (và vùng phụ cận)từ
**4.102.648 ₫**
- Studio, 2 giường đôi, Bếp nhỏ
- Phòng Suite, 2 phòng ngủ
- Phòng
- Phòng Suite Elite, 2 phòng ngủ
- Phòng Suite, 1 phòng ngủ
### Khách sạn được đề xuất
[Xem theo danh sách](/search.do?destination-id=1496065&q-room-0-adults=2&q-rooms=1&q-room-0-children=0) [Xem trên bản đồ](/search/searchmap.html?destination-id=1496065&q-room-0-adults=2&q-rooms=1&q-room-0-children=0)
## Tổng quan
### Thông tin cần biết
#### Quy mô khách sạn
- Khách sạn này có 40 phòng
- Khách sạn này gồm 2 tầng
#### Nhận phòng/Trả phòng
- Giờ nhận phòng từ 16:00
- Giờ trả phòng là 10:00
#### Giấy tờ cần có khi nhận phòng
- Đặt cọc bằng thẻ tín dụng
- Phải có giấy tờ tùy thân (ID) có ảnh hợp lệ
- Tuổi nhận phòng tối thiểu là 21
### Đồng hành
#### Trẻ em
- Trẻ 18 tuổi trở xuống lưu trú miễn phí cùng cha mẹ hoặc người giám hộ nếu sử dụng giường có sẵn
- Không có nôi (giường cũi cho trẻ sơ sinh)
#### Vật nuôi
- Không được mang theo vật nuôi
### Internet
- Có thể truy cập Internet Wifi và có dây
*miễn phí*tại các khu vực chung
- WiFi
*miễn phí*trong phòng
### Đi lại
#### Đậu xe
- Bãi đậu xe tự phục vụ
*miễn phí*
### Khách sạn 3 sao lân cận tại St. Petersburg - Clearwater (và vùng phụ cận)
## Tại khách sạn
- Khu lò nướng BBQ
- Hồ bơi ngoài trời
- Phòng tắm hơi sauna
- Phòng trò chơi/giải trí có thưởng
- Bàn bi-da
- Trung tâm hành chính, văn phòng
- Máy vi tính
- Quầy tiếp tân (giờ làm việc giới hạn)
- Trang thiết bị giặt ủi
- Thang máy
- Khu vực hút thuốc riêng biệt
## Tại phòng
- Máy điều hòa
- Dụng cụ pha cà phê/trà
- Bàn ủi quần áo
- TV
- Truyền hình cáp
- Đầu đĩa DVD
- Wifi miễn phí
- Điện thoại nội vùng miễn phí
- Tủ lạnh
- Lò vi sóng
- Bếp nhỏ
- Dụng cụ nấu nướng, bát dĩa, dao nĩa
- Két an toàn tại phòng
### Khách sạn hàng đầu tại St. Petersburg - Clearwater (và vùng phụ cận)
### Khách sạn trong khu vực
## Ghi chú của Legacy Vacation Resorts-Indian Shores - St. Petersburg - Clearwater (và vùng phụ cận)
### Tên gọi khác
- Legacy Vacation Resorts-Indian
- Celebrity Resort Indian Shores
- Celebrity Hotel Indian Shores
- Legacy Vacation Resorts-Indian Condo
- Legacy Vacation Resorts-Indian Condo Shores
- Legacy Vacation Resorts-Indian Shores
- Legacy Vacation Resorts-Indian Shores Florida
- Legacy Vacation Resorts-Indian Shores Hotel Indian Shores
- Legacy Vacation Resorts-Indian Shores Condo Indian Shores
- Legacy Vacation Resorts-Indian Shores Condo
- Legacy Vacation Resorts-Indian Shores Indian Shores
### Phí bắt buộc
Bạn sẽ thanh toán các khoản phí sau khi nhận hoặc trả phòng:
Đặt cọc: 100 USD mỗi lần lưu trú
- Phí resort: 3.99 USD mỗi chỗ ở, mỗi đêm
### Các tùy chọn khác
Khách có thể
**trả phòng muộn** với khoản phụ phí nhỏ
Khách sạn cung cấp
**dịch vụ dọn phòng** với khoản phụ phí 37.00 USD mỗi ngày
Chúng tôi đã liệt kê mọi khoản phí được khách sạn thông báo với mình. Tuy nhiên, phí cụ thể có thể khác biệt, ví dụ như phụ thuộc vào thời gian lưu trú hoặc loại phòng của bạn.
## Nhận xét gần đây
Tuyệt vời 4,4 /5 from 147 reviews
This is a great location...walk across the street to the beach or walk down to the marina...get the best of both worlds. Whoever purchased this hotel is putting alot of money into and the improvements are and will pay off...GREAT JOB!!! I would recommend this place to anyone...we stayed in room 207
Very nice?. There was construction going on in the next room, so it was loud sometimes, but overall, very nice stay.
Great room and across from beach.
Very dated. Don't know how it gets a 4.4 rating and I would hardly call it a resort.
Everything was great. They are working on the rooms. They had an RCI sign by the front desk but did not come up on the list.
[Mô tả khách sạn này không chính xác? Hãy cho chúng tôi biết!](https://secure.opinionlab.com/ccc01/o.asp?id=InPecsCs&custom_var=df125eb2-9df4-4a29-bf0b-4145ae2823d5%7CHCOM_VN%7Cvi_VN%7C224520&referer=http%3A%2F%2Fhotelinfo.hotels.com%2Fvi.hotels.com%2Fho224520%2Flegacy-vacation-resorts-indian-shores-indian-shores-my%2F) ![ ](https://a1.cdn-hotels.com/da/assets/s/44.0/images/common/pages/pda/trust-you-reviews-credit.png)

WARC-Truncated: length


markdown:
*Megalurus rufescens*
Bách khoa toàn thư mở Wikipedia
|
|Megalurus rufescens
|
|[Phân loại khoa học](/wiki/Ph%C3%A2n_lo%E1%BA%A1i_sinh_h%E1%BB%8Dc) [Giới](/wiki/Gi%E1%BB%9Bi_(sinh_h%E1%BB%8Dc))( *regnum*) [Animalia](/wiki/%C4%90%E1%BB%99ng_v%E1%BA%ADt) [Ngành](/wiki/Ng%C3%A0nh_(sinh_h%E1%BB%8Dc))( *phylum*) [Chordata](/wiki/%C4%90%E1%BB%99ng_v%E1%BA%ADt_c%C3%B3_d%C3%A2y_s%E1%BB%91ng) [Lớp](/wiki/L%E1%BB%9Bp_(sinh_h%E1%BB%8Dc))( *class*) [Aves](/wiki/Chim) [Bộ](/wiki/B%E1%BB%99_(sinh_h%E1%BB%8Dc))( *ordo*) [Passeriformes](/wiki/B%E1%BB%99_S%E1%BA%BB) [Họ](/wiki/H%E1%BB%8D_(sinh_h%E1%BB%8Dc))( *familia*) [Locustellidae](/wiki/H%E1%BB%8D_Ch%C3%ADch_%C4%91%E1%BA%A7m_l%E1%BA%A7y) [Chi](/wiki/Chi_(sinh_h%E1%BB%8Dc))( *genus*) [Megalurus](/wiki/Megalurus) [Loài](/wiki/Lo%C3%A0i)( *species*) **M. rufescens** [Danh pháp hai phần](/wiki/Danh_ph%C3%A1p_hai_ph%E1%BA%A7n) *Megalurus rufescens* * là một loài Megalurus rufescens* [chim](/wiki/Chim)trong họ [Locustellidae](/wiki/H%E1%BB%8D_Ch%C3%ADch_%C4%91%E1%BA%A7m_l%E1%BA%A7y). [[1]](#cite_note-1)
## Chú thích[
[sửa](/w/index.php?title=Megalurus_rufescens&veaction=edit&vesection=1) | [sửa mã nguồn](/w/index.php?title=Megalurus_rufescens&action=edit§ion=1)] **Clements, J. F., T. S. Schulenberg, M. J. Iliff, B.L. Sullivan, C. L. Wood, and D. Roberson (2012).** [^](#cite_ref-1) [“The eBird/Clements checklist of birds of the world: Version 6.7.”](http://www.birds.cornell.edu/clementschecklist/downloadable-clements-checklist). Truy cập ngày 19 tháng 12 năm 2012.

Set-Cookie: GeoIP=US:VA:Ashburn:39.04:-77.49:v4; Path=/; secure; Domain=.wikipedia.org

X-Content-Type-Options: nosniff

Cache-Control: private, s-maxage=0, max-age=0, must-revalidate

P3P: CP="This is not a P3P policy! See https://vi.wikipedia.org/wiki/%C4%90%E1%BA%B7c_bi%E1%BB%87t:CentralAutoLogin/P3P for more info."

Via: 1.1 varnish, 1.1 varnish

Content-Language: vi

X-Cache: cp1053 miss, cp1067 miss

Vary: Accept-Encoding,Cookie,Authorization

Accept-Ranges: bytes


markdown:
# Vạn Lý, Tân Bắc
Bách khoa toàn thư mở Wikipedia
|Vạn Lý
|
萬里區
|—
|![ Hình nền trời của Vạn Lý](//upload.wikimedia.org/wikipedia/commons/thumb/b/bc/Yehliu_IMG_0468.JPG/250px-Yehliu_IMG_0468.JPG)
![ Vị trí tại Tân Bắc](//upload.wikimedia.org/wikipedia/commons/thumb/6/61/Wanli.png/250px-Wanli.png)
![ Vị trí tại Tân Bắc](http://upload.wikimedia.org/wikipedia/commons/thumb/6/61/Wanli.png/250px-Wanli.png)
Vị trí tại Tân Bắc
![ ](http://upload.wikimedia.org/wikipedia/commons/thumb/7/72/Flag_of_the_Republic_of_China.svg/23px-Flag_of_the_Republic_of_China.svg.png)
[Trung Hoa Dân Quốc](/wiki/Trung_Hoa_D%C3%A2n_Qu%E1%BB%91c) [Tân Bắc](/wiki/T%C3%A2n_B%E1%BA%AFc) 2(244,700 mi 2) [Mật độ](/wiki/M%E1%BA%ADt_%C4%91%E1%BB%99_d%C3%A2n_s%E1%BB%91) 2(903/mi 2) [Múi giờ](/wiki/M%C3%BAi_gi%E1%BB%9D) [Giờ chuẩn Trung Quốc](/w/index.php?title=Gi%E1%BB%9D_chu%E1%BA%A9n_Trung_Qu%E1%BB%91c&action=edit&redlink=1)( [UTC+8](/wiki/UTC%2B8)) **Vạn Lý** ( [Trung văn phồn thể](/wiki/Trung_v%C4%83n_ph%E1%BB%93n_th%E1%BB%83): 萬里區; [Hán ngữ bính âm](/wiki/H%C3%A1n_ng%E1%BB%AF_b%C3%ADnh_%C3%A2m): *Wànlǐ Qū*; [Bính âm thông dụng](/w/index.php?title=B%C3%ADnh_%C3%A2m_th%C3%B4ng_d%E1%BB%A5ng&action=edit&redlink=1): Wànlǐ Cyu; [Bạch Thoại tự](/w/index.php?title=B%E1%BA%A1ch_Tho%E1%BA%A1i_t%E1%BB%B1&action=edit&redlink=1): Bān-lì khu) là một [khu](/wiki/Khu_(%C4%90%C3%A0i_Loan)) (quận) của thành phố [Tân Bắc](/wiki/T%C3%A2n_B%E1%BA%AFc), [Trung Hoa Dân Quốc](/wiki/Trung_Hoa_D%C3%A2n_Qu%E1%BB%91c) ( [Đài Loan](/wiki/%C4%90%C3%A0i_Loan)). Quận nằm trên một khu vực bờ biển đất đá và có tỷ lệ đô thị hóa thấp. Trịnh Thành Công đã đổ bộ lên khu vực Vạn Lý ngày nay vào năm 1661 đển đánh đuổi quân Hà Lan.
## Tham khảo[
[sửa](/w/index.php?title=V%E1%BA%A1n_L%C3%BD,_T%C3%A2n_B%E1%BA%AFc&veaction=edit&vesection=1) | [sửa mã nguồn](/w/index.php?title=V%E1%BA%A1n_L%C3%BD,_T%C3%A2n_B%E1%BA%AFc&action=edit§ion=1)]
## Liên kết ngoài[
[sửa](/w/index.php?title=V%E1%BA%A1n_L%C3%BD,_T%C3%A2n_B%E1%BA%AFc&veaction=edit&vesection=2) | [sửa mã nguồn](/w/index.php?title=V%E1%BA%A1n_L%C3%BD,_T%C3%A2n_B%E1%BA%AFc&action=edit§ion=2)]
|
|


markdown:
# принуждение
Từ điển mở Wiktionary
## Tiếng Nga[
[sửa](/w/index.php?title=B%E1%BA%A3n_m%E1%BA%ABu:-rus-&action=edit§ion=T-1)]
### Chuyển tự[
[sửa](/w/index.php?title=B%E1%BA%A3n_m%E1%BA%ABu:-translit-&action=edit§ion=T-1)]
Xem
[Wiktionary:Phiên âm của tiếng Nga](/wiki/Wiktionary:Phi%C3%AAn_%C3%A2m_c%E1%BB%A7a_ti%E1%BA%BFng_Nga). [Chữ Latinh](/wiki/ch%E1%BB%AF_Latinh):
### Danh từ[
[sửa](/w/index.php?title=B%E1%BA%A3n_m%E1%BA%ABu:-noun-&action=edit§ion=T-1)] **принужд ение** gt
- (
*Sự*) [Cưỡng bách](/w/index.php?title=c%C6%B0%E1%BB%A1ng_b%C3%A1ch&action=edit&redlink=1), [cưỡng bức](/wiki/c%C6%B0%E1%BB%A1ng_b%E1%BB%A9c), [cưỡng chế](/w/index.php?title=c%C6%B0%E1%BB%A1ng_ch%E1%BA%BF&action=edit&redlink=1), [bức bách](/wiki/b%E1%BB%A9c_b%C3%A1ch), [ép buộc](/wiki/%C3%A9p_bu%E1%BB%99c), [bắt buộc](/wiki/b%E1%BA%AFt_bu%E1%BB%99c). *д*— miễn cưỡng (bất đắc dĩ phải) làm việc gì __е__лать чт __о__-л. по **принужд** __е__нию *д*— tự nguyện làm việc gì __е__лать чт __о__-л. без **принужд** __е__ния
-
### Tham khảo[
[sửa](/w/index.php?title=B%E1%BA%A3n_m%E1%BA%ABu:-ref-&action=edit§ion=T-1)]
- Hồ Ngọc Đức,
[Dự án Từ điển tiếng Việt miễn phí](http://www.informatik.uni-leipzig.de/~duc/Dict/)( [chi tiết](/wiki/Wiktionary:Ngu%E1%BB%93n_g%E1%BB%91c/FVDP))

Set-Cookie: GeoIP=US:VA:Ashburn:39.04:-77.49:v4; Path=/; secure; Domain=.wiktionary.org

P3P: CP="This is not a P3P policy! See https://vi.wiktionary.org/wiki/%C4%90%E1%BA%B7c_bi%E1%BB%87t:CentralAutoLogin/P3P for more info."

X-Cache: cp1052 miss, cp1055 miss


markdown:
# dessverre
Từ điển mở Wiktionary
## Tiếng Na Uy[
[sửa](/w/index.php?title=B%E1%BA%A3n_m%E1%BA%ABu:-nor-&action=edit§ion=T-1)]
### Phó từ[
[sửa](/w/index.php?title=B%E1%BA%A3n_m%E1%BA%ABu:-adv-&action=edit§ion=T-1)] **dessverre**
- Rất
[tiếc](/wiki/ti%E1%BA%BFc). *Dessverre er vi utsolgt for brød.* *Han kan* **dessverre**ikke komme likevel.
-
### Tham khảo[
[sửa](/w/index.php?title=B%E1%BA%A3n_m%E1%BA%ABu:-ref-&action=edit§ion=T-1)]
- Hồ Ngọc Đức,
[Dự án Từ điển tiếng Việt miễn phí](http://www.informatik.uni-leipzig.de/~duc/Dict/)( [chi tiết](/wiki/Wiktionary:Ngu%E1%BB%93n_g%E1%BB%91c/FVDP))

X-Cache: cp1055 miss, cp1055 miss


markdown:
# public
Từ điển mở Wiktionary
## Tiếng Anh[
[sửa](/w/index.php?title=B%E1%BA%A3n_m%E1%BA%ABu:-eng-&action=edit§ion=T-1)]
### Cách phát âm[
[sửa](/w/index.php?title=B%E1%BA%A3n_m%E1%BA%ABu:-pron-&action=edit§ion=T-1)]
|Hoa Kỳ||
|
### Tính từ[
[sửa](/w/index.php?title=B%E1%BA%A3n_m%E1%BA%ABu:-adj-&action=edit§ion=T-1)]
|
|
Cấp trung bình
|
|
Cấp hơn
|
|
Cấp nhất
**public** ( *cấp hơn* **more public**, *cấp nhất* **most public**) [Chung](/wiki/chung), [công](/wiki/c%C3%B4ng), [công cộng](/w/index.php?title=c%C3%B4ng_c%E1%BB%99ng&action=edit&redlink=1). *— ngày lễ chung* **public**holiday *— dư luận, công luận* **public**opinion *— thư viện công cộng* **public**library *— trường công* **public**school *— những ngành phục vụ công cộng (điện, nước...)* **public**utilities
-
[Công khai](/wiki/c%C3%B4ng_khai). *to make a*— phản đối công khai **public**protest *to give something*— công bố cái gì **public**utterance
-
### Danh từ[
[sửa](/w/index.php?title=B%E1%BA%A3n_m%E1%BA%ABu:-noun-&action=edit§ion=T-1)] **public** ( *số nhiều* **) publics** [Công chúng](/wiki/c%C3%B4ng_ch%C3%BAng), [quần chúng](/wiki/qu%E1%BA%A7n_ch%C3%BAng). *to appeal to the*— kêu gọi quần chúng **public**
-
[Nhân dân](/wiki/nh%C3%A2n_d%C3%A2n), [dân chúng](/wiki/d%C3%A2n_ch%C3%BAng). *the British*— nhân dân Anh **public**
-
[Giới](/wiki/gi%E1%BB%9Bi). *the sporting*— giới ham chuộng thể thao **public** *the reading*— giới bạn đọc **public**
-
- (
*Thông tục, cổ*) Như [public house](/w/index.php?title=public_house&action=edit&redlink=1).
#### Thành ngữ[
[sửa](/w/index.php?title=B%E1%BA%A3n_m%E1%BA%ABu:-expr-&action=edit§ion=T-1)] **in public**: Giữa [công chúng](/wiki/c%C3%B4ng_ch%C3%BAng), [công khai](/wiki/c%C3%B4ng_khai).
### Tham khảo[
[sửa](/w/index.php?title=B%E1%BA%A3n_m%E1%BA%ABu:-ref-&action=edit§ion=T-1)]
- Hồ Ngọc Đức,
[Dự án Từ điển tiếng Việt miễn phí](http://www.informatik.uni-leipzig.de/~duc/Dict/)( [chi tiết](/wiki/Wiktionary:Ngu%E1%BB%93n_g%E1%BB%91c/FVDP))