4 ms·
These are interesting as curiosities, but most of them are not interesting from the point of view of deceiving users, and this was the case even when the articl
by dmurray 9y ago
These are interesting as curiosities, but most of them are not interesting from the point of view of deceiving users, and this was the case even when the article was written.
It's trivial to make users think they are not visiting evil.com, or just to serve evil content from evil2.com instead. This means a blacklist model of web addresses will never work, and even the most naive computer user uses a whitelist instead, if they pay attention to urls at all.
The username:password@evil.com/... trick is the exception, and it's good that browsers are working on ways to mitigate this.
- deleted 9y ago[deleted]
- styfle 9y agoA lot of large organizations purchase domains that are similar to theirs to avoid typo-squatting as well as the impersonation you pointed out. The creation of new TLDs in the last few years only increases the permutations. For example: http://google.com http://google.com http://com.google http://com.google