Does IE10 Enforce Credential Expiration for Zone-Based Integrated Authentication?
Internet Explorer 10 implements zone-based security with four default zones (Internet, Local Intranet, Trusted Sites, Restricted Sites). Integrated Windows authentication (NTLM/Kerberos) is supported for intranet sites, but the browser lacks a built-in mechanism for automatic credential expiration or rotation. Credentials are cached in memory and potentially