[security] How to prevent phishing...

[Allen Tom]

Gareth -

Yahoo does this using the Sign In Seal on the Login screen. Users may 
create a personalized icon that is tied to their browser and is only 
displayed on the Yahoo Login screen.

Because Phishing sites are unable to display the Sign In Seal, we are 
trying to educate users to always look for their Sign In Seal before 
they login.

More info about the Yahoo! Sign-in Seal is here:
http://help.yahoo.com/l/us/yahoo/edit/privacy/index.html

Allen


Johannes Berg wrote:
> On Wed, 2007-04-11 at 10:16 +0100, gaz_sec at hushmail.com wrote:
>
>   
>> I've come up with an idea for peventing phishing, I would love to
>> hear everyone's thoughts:-
>> http://www.thespanner.co.uk/2007/04/11/how-to-prevent-phishing/
>>     
>
> Btw. myopenid.com does this with a "personal icon"
>
> johannes
>   
> ------------------------------------------------------------------------
>
> _______________________________________________
> security mailing list
> security at openid.net
> http://openid.net/mailman/listinfo/security
>