Ronald Crane via dev-security-policy <[email protected]> 
writes:

>"Virtually impossible"? "Anyone"? Really? Those are big claims that need real
>data.

How many references to research papers would you like?  Would a dozen do, or
do you want two dozen?

(This has been researched to death, it's not rocket science, given a bit of
time you can dig up vast numbers of references.  The only reason I haven't do
it for this post is that I get the feeling I'd be wasting said time doing so).

>I'm pretty sure I haven't been phished yet.

How would you know?  And how does this help the other 7.53 billion people who
will be targets for phishers?

>In any case, have we ever really tried to teach users to use the correct
>domain?

Yes, we've tried that.  And that.  And that too.  And the other thing.  Yes,
that too.  

None of them work.

Peter.
_______________________________________________
dev-security-policy mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security-policy

Reply via email to