A system and method, comprising: an interface port to a data communication network; a processor and associated memory, configured to execute a content browser, and a browser plugin, the browser plugin filtering at least a portion of data received by the content browser, and at least one of selectively blocking, modifying, or permitting interaction of a user with the received data, in dependence on at least a user-associated configuration file received from a remote resource through the interface port, and communicating at least one item of information which is blocked from access by the user; and a display port, configured to output information defining a user presentation of browser output. Communications between the remote resource and the plugin or browser may be encrypted. For example, the plugin receives user login information from the remote resource, and automatically fills in a login page for an Internet resource, while preventing user-access to the login information itself.