Eddy Nigg (StartCom Ltd.) wrote:
Already suggested this and more....General in agreement with you, so I'm not sure if the domain name itself is the most important thing, because the domain is in the address bar already* Clearly showing domain (and *only* domain) and maybe real world owner (from cert)
No. The URL is in the address bar. That's not the same thing: http://[EMAIL PROTECTED]/login/foo?value=reallylongthingbecauseICan vs EVIL.COM Not that that would necessarily help with www.citibank.com.evil.com, mind you. ;) -Boris _______________________________________________ dev-security mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security
