5 ms·
Have you used browsers since 1999 or so? First, browsers added a padlock icon on the left for https:// https:// sites. Then, phishing sites, and even banking w
by ploxiln 10y ago
Have you used browsers since 1999 or so?
First, browsers added a padlock icon on the left for https:// https:// sites. Then, phishing sites, and even banking websites, started using a padlock for their favicon, and users couldn't tell the difference. So it was abandoned.
Then, the whole background of the URL bar was turned a sort of gold-yellow color when the site was secure. It was like this:
http://www.facebookloginhut.com/wp-content/uploads/2010/07/step2_facebook_login.png http://www.facebookloginhut.com/wp-content/uploads/2010/07/s...
Then that effect was removed, I think it scared some users, or they didn't know to look for it, I don't know.
Now, favicons are never shown in the URL bar so a padlock favicon can no longer mislead. Some browser started hiding "http://" http://", some started coloring "https://" https://". (Now many do both.) The extended-validation green pill thing was added. It's harder than ever to allow a self-signed cert when you're using a service you set up yourself on your LAN.
Apparently there are more changes planned, every year or so. "users" have no chance of keeping this stuff straight, only "experts" like me and you do.
- lstamour 10y agoI think people learn to follow whatever their browser does, assuming they bother to notice in the first place. I wouldn't worry as much about how to get people to notice security, browser vendors are on the right track by popping up giant notices for insecure sites and sites with malware. They just need to extend the "untrusted download" concept from operating systems to email where you could have "untrusted link" warnings in your browser instead. "Are you sure you want to visit paypal.28753272.server? You really shouldn't trust this link..."