4 ms·
Domain check is good, but can be misread, especially with IDNs. Of course, URLs can be mistyped too and a lot of phishing is based on typos of URLs. So really,
by DanielStraight 16y ago
Domain check is good, but can be misread, especially with IDNs. Of course, URLs can be mistyped too and a lot of phishing is based on typos of URLs. So really, in the end, you should always follow a bookmark before logging in.
- pornel 16y agoI trust my password manager. It auto-fills my passwords only on correct domains. When my password manager doesn't work, I'm highly suspicious. Plus I use passwords that are auto-generated based on domain name, which I copy & paste to the generator. Hopefully this makes me immune to homograph attacks.
- francoisdevlin 16y agoWhat pm do you use?
- giu 16y ago1Password Password Manager and Form Filler may be an option: http://www.apple.com/downloads/macosx/networking_security/1passwordpasswordmanagerandformfiller.html http://www.apple.com/downloads/macosx/networking_security/1p...
- pornel 16y agoOpera's built-in “Wand” + my own script. I like that Opera highlights recognized fields, but doesn't fill them in until I tell it to.
- acangiano 16y ago1Password takes care of that for me. I don't see any accounts available if I'm on the wrong domain name.