The real problem that https has conspicuously failed to fix

Roy M.Silvernail roy at rant-central.com
Mon Jun 9 00:38:03 EDT 2003


On Sunday 08 June 2003 06:11 pm, martin f krafft wrote:
> also sprach James A. Donald <jamesd at echeque.com> [2003.06.08.2243 +0200]:
> > (When you hit the submit button, guess what happens)
>
> How many people actually read dialog boxes before hitting Yes or OK?

It's slightly more subtle.  The action tag of a form submission isn't usually 
visible to the user like links are.  In the scam copy I received, all the 
links save one pointed to legitimate PayPal documents.  Only the <form 
action= gave it away, and you have to view source to see that.

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com



More information about the cryptography mailing list