4 ms·
"we will never ask for your personal information" It's a nice first step, but then they break the security model by sending emails with a link to click on. Ev
by alister 14y ago
"we will never ask for your personal information"
It's a nice first step, but then they break the security model by sending emails with a link to click on.
Every single service provider, bank, credit card, airline, or utility that sends me email, sends it with embedded links.
Customers have now been trained to click on links and give their passwords to login screens if they look halfway authentic.
- MichaelApproved 14y agoAt least in this case, I'm calling the bank. Meaning, I'm vising their page and I can confirm that it's actually the bank that I'm communicating with. Browsers have been getting better about protecting users when it comes to online bank phishing attacks. Secure connections are emphasized more and getting rid of basic auth in the URL helps defend the customer from spoofing tactics.