How is it flawed? According to the original report IE's handling is correct, it's the spec that's flawed.
It's also my opinion that while the implementation is strictly speaking correct, IE's default settings are too conservative and it is not at all an easy option for the user to change.