Re: Symptoms vs. Causes (was next step on web phishing draft)

2007-09-11 Thread Shumon Huque
Michael Dillon said: Personally, I would like to see some more criticism of the fact that this draft is about Phishing, a symptom of security problems, rather than about strengthening a weakness in Internet security. It is entirely possible to solve the phishing problem without strengthening

Re: Symptoms vs. Causes (was next step on web phishing draft)

2007-09-11 Thread Bernard Aboba
I certainly agree with attacking the cause rather than symptom. But a portion of Sam Hartman's draft is in fact dealing with a cause of the symptom. Namely the part that is trying to protect user credentials from disclosure to an unauthorized party -- by proposing to eliminate the near

Re: Symptoms vs. Causes (was next step on web phishing draft)

2007-09-10 Thread Bernard Aboba
Michael Dillon said: Personally, I would like to see some more criticism of the fact that this draft is about Phishing, a symptom of security problems, rather than about strengthening a weakness in Internet security. It is entirely possible to solve the phishing problem without strengthening the