A cool demo of how to spoof sites (also shows how TrustBar preventsthis...)

Taral taral at taral.net
Wed Feb 9 14:06:22 EST 2005


On Wed, Feb 09, 2005 at 07:41:36PM +0200, Amir Herzberg wrote:
> Want to protect your Mozilla/FireFox from such attacks? Install our 
> TrustBar: http://TrustBar.Mozdev.org
> (this was the first time that I had a real reason to click the `I don't 
> trust this authority` button...)
> 
> Opinions?

Why should I trust you? Filtering xn--* domains works for me, and
doesn't require that I turn my browser over to unreviewed, possibly
buggy code.

-- 
Taral <taral at taral.net>
This message is digitally signed. Please PGP encrypt mail to me.
A: Because it fouls the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing on usenet and in e-mail?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20050209/6a2a894b/attachment.pgp>


More information about the cryptography mailing list