> “Makes it harder to tell if the current site is legitimate" sounds like an excuse. Why? To me, having helped elderly relatives with computers a lot, it is ve

> “Makes it harder to tell if the current site is legitimate" sounds like an excuse. Why? To me, having helped elderly relatives with computers a lot, it is very plausible. Phishing URLs use all sorts of subdomain and querystring tricks to fool users, and it can work.