3.11 Ensure 'Enable or disable spell checking web service' is set to 'Disabled'

Information

Google Chrome can use Google web service to help resolve spelling errors.

The recommended state for this setting is: Disabled (0)

Rationale:

Information typed in may be leaked to Google's spellcheck web service.

Impact:

After disabling this feature, Chrome no longer sends the entire contents of text fields to Google as you type them. Spell checking can still be performed using a downloaded dictionary. This setting only controls the usage of the online service.

Solution

To establish the recommended configuration via Group Policy, set the following UI path to Disabled:

Computer Configuration\Administrative Templates\Google\Google Chrome\Enable or disable spell checking web service

Default Value:

Unset (Same as Enabled, but user can change)

See Also

https://workbench.cisecurity.org/benchmarks/8691

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-8, CSCv7|4.8

Plugin: Windows

Control ID: e30e04888e969d91d7a25f7f5804f8580e01bbe17544b0900076e3e0e65e41f2