4 ms·

How would a browser ever know this?

• diminoten 14y ago
  Probably the same way they know which sites are likely to contain malware or be involved in phishing scams: user reports.
  • Tipzntrix 14y ago
    Yep. http://news.ycombinator.com/item?id=4555083 http://news.ycombinator.com/item?id=4555083 I.E. is actually the best at stopping social engineering attacks on your average consumer because of their SmartScreen technology, which relies completely on feedback from the community, both automatic and manual. No reason to downvote this or the original comment IMO.
• nathan_long 14y ago
  Of course the browser can't know this. But one clue for the user is if there is a strict length limit. If you're going to hash my password to 16 characters anyway, why can't I type in 20? But if you're going to store it as plaintext, you need to limit what I input.