3 ms·

All it would require is an AMP website that mimics the Google login page. It already says "google.com" at the top of the browser, and we've told users to trust

All it would require is an AMP website that mimics the Google login page. It already says "google.com" at the top of the browser, and we've told users to trust that, so...

8ytecoder 6y ago
I’m surprised this is not widespread yet. Is there anything in AMP to detect and block phishing attempts?
ValueNull 6y ago
The google.com domain would also probably trigger autofill recommendations from some password managers, which would make things even more convincing and seamless.