<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
The popup window will be REQUIRED to display the address bar. OPs will
be strongly encouraged to educate their users to always pay attention
to the URL of the address bar before entering their credentials.<br>
<br>
In particular, I think MySpace does an excellent job on their home page:<br>
<br>
<h3>Always make sure you're visiting the real myspace.com!</h3>
<ol>
<li>Check the URL in your browser.</li>
<li>Make sure it begins with <a class="moz-txt-link-freetext" href="http://www.myspace.com/">http://www.myspace.com/</a></li>
<li>If ANY OTHER PAGE asks for your info, DON'T LOG IN!</li>
</ol>
Allen<br>
<br>
<br>
SitG Admin wrote:
<blockquote cite="mid:f06110401c5e89af89b8c@%5B192.168.0.2%5D"
type="cite">
<blockquote type="cite">Phishing still is a major concern, however,
we do not think that the popup window significantly changes the
phishing scenarios compared to the existing full browser window UIs
today.
<br>
</blockquote>
<br>
Are you speaking of full-size windows, here, or windows that have an
address bar in them? Pop-up windows that are missing this indication of
what site the user is at may reduce confusion by eliminating
distractions, but they also take away from the user's awareness of
what's going on.
<br>
<br>
-Shade
<br>
</blockquote>
<br>
</body>
</html>