1) I do remember a post a while back where a Firefox user submitted a bug report due to actually encountering a MITM attack, so not 100% are false positives. (

1) I do remember a post a while back where a Firefox user submitted a bug report due to actually encountering a MITM attack, so not 100% are false positives. (the post: http://news.ycombinator.com/item?id=353376 http://news.ycombinator.com/item?id=353376 ) 2) A minute a day may outweigh the phishing losses, but who says you need to spend a minute? My browser has warned me once in the past 4 months about a possible phishing site, so I spent something like 1 minute in 120 days to check it out.