If the address bar is shown, I fail to see _any_ difference in phishing concerns in popup mode vs full redirect. <br><br><br><div class="gmail_quote">On Thu, Mar 19, 2009 at 6:11 PM, Allen Tom <span dir="ltr"><<a href="mailto:atom@yahoo-inc.com">atom@yahoo-inc.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div bgcolor="#ffffff" text="#000000">
The popup window will be REQUIRED to display the address bar. OPs will
be strongly encouraged to educate their users to always pay attention
to the URL of the address bar before entering their credentials.<br>
<br>
In particular, I think MySpace does an excellent job on their home page:<br>
<br>
<h3>Always make sure you're visiting the real <a href="http://myspace.com" target="_blank">myspace.com</a>!</h3>
<ol>
<li>Check the URL in your browser.</li>
<li>Make sure it begins with <a href="http://www.myspace.com/" target="_blank">http://www.myspace.com/</a></li>
<li>If ANY OTHER PAGE asks for your info, DON'T LOG IN!</li>
</ol>
Allen<div class="im"><br>
<br>
<br>
SitG Admin wrote:
<blockquote type="cite">
<blockquote type="cite">Phishing still is a major concern, however,
we do not think that the popup window significantly changes the
phishing scenarios compared to the existing full browser window UIs
today.
<br>
</blockquote>
<br>
Are you speaking of full-size windows, here, or windows that have an
address bar in them? Pop-up windows that are missing this indication of
what site the user is at may reduce confusion by eliminating
distractions, but they also take away from the user's awareness of
what's going on.
<br>
<br>
-Shade
<br>
</blockquote>
<br>
</div></div>
<br>_______________________________________________<br>
general mailing list<br>
<a href="mailto:general@openid.net">general@openid.net</a><br>
<a href="http://openid.net/mailman/listinfo/general" target="_blank">http://openid.net/mailman/listinfo/general</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br>--Breno<br><br>+1 (650) 214-1007 desk<br>+1 (408) 212-0135 (Grand Central)<br>MTV-41-3 : 383-A <br>PST (GMT-8) / PDT(GMT-7)<br>