4 ms·
It seems to me that a list of known good domains provided by a large browser vendor (Google) with extra treatment in the browser might be the most effective aga
by solarkraft 7y ago
It seems to me that a list of known good domains provided by a large browser vendor (Google) with extra treatment in the browser might be the most effective against phishing and other scams.
This could be sold as an add-on for a certificate, or something like that, with a just high enough barrier for proving authenticity. Known-good domains could then additional treatment, like a blue padlock or one with a star (ok, I'm not an icon designer).
Of course you can argue against it on a freedom basis, but I think for protecting vulnerable web users it'd be pretty useful.
- Spivak 7y agoYour idea isn’t that weird. If you do it right you’re basically inventing the Web of Trust. As long as you put the user in control of what entitles they trust to validate sites it would actually be a super useful feature. The problem is always the political one. What does, say, Microsoft vouching for a site actually mean?
- heipei 7y agoYou're not that far off. If you took the Alexa Top 100k sites and display some kind of indication whenever a page isn't on that list you would be able to stop the most obvious phishing attempts. Google has a Safe Browsing Extension which, as its first steps, checks the 15k most common sites or so. If you tailor these lists to specific countries I'd wager you can get away with even fewer entries. There's other tricks that scammers pull though, like compromising legitimate domains with a certain reputation and then adding their scammy subdomains, but that's a lot harder to pull off than just registering 100 free domains everyday and hoping one sticks.
- lonelappde 7y agoSecurity measures like that becomes "Google abuses its monopoly to suppress competition" complaints that are frontpaged here every week.