3 ms·
The issue is that users tend not to notice the absence of EV security indicators. If they see a padlock (which a phisher could get for a phishing domain), they
by tonyztan 9y ago
The issue is that users tend not to notice the absence of EV security indicators. If they see a padlock (which a phisher could get for a phishing domain), they assume it's secure and enter their credentials.
Also, it may not be apparent to users whether "The Royal Bank of Scotland Group Plc [GB]" would be affiliated with NatWest. Companies often have different names they do business under.
- paulddraper 9y ago> Companies often have different names they do business under. If the name is unrecognizable for users, _that_ is the user security concern that you should be posting about. That handles the widest array of security vulnerabilities on http://personal.natwest.com/ http://personal.natwest.com/, whether MITM, compromised site, misspelled domain, etc.