That is why I don't click on links to my bank but rather type the URL ;-) There is so much you can do to help with phising. HTTPS everywhere is not IMHO a solu

That is why I don't click on links to my bank but rather type the URL ;-) There is so much you can do to help with phising. HTTPS everywhere is not IMHO a solution. It could even lead to a false sense of security. It's more, HTTPS is the tip of the iceberg. Your bank should send a SMS to confirm any potentially litigious action (mine does). Security is a trade off. Some sites that really need high levels of security (and they are not that many) could say, look, I have HTTPS, you're safe. Errr ... no ... they are some much more you could/should do.