| CPC G06F 21/565 (2013.01) [G06F 16/113 (2019.01); G06F 21/602 (2013.01); G06F 2221/034 (2013.01)] | 14 Claims |

|
1. A system, comprising:
a processor configured to:
determine, at a browser isolation system, that a user has selected, from an interface rendered in a browser executing on a client device, an archive comprising at least one file, wherein the browser isolation system is configured to provide a surrogate browser to facilitate communications between the client browser and the archive, and wherein the archive is hosted by a remote site;
determine, by the browser isolation system, that at least one of the selected archive or a subcomponent of the selected archive is encrypted and in response to determining that the at least one of the selected archive or the subcomponent of the selected archive is encrypted, prompt the user for a credential in the browser; and
selectively providing access to the archive, or providing access to a modified version of the archive based at least in part on a security policy applicable to the user and based on the user's response to the prompt; and
a memory coupled to the processor and configured to provide the processor with instructions.
|