Study Finds IE7 + EV SSL Won't Stop Phishing

Posted by kdawson on Friday January 26, 2007 @02:02AM from the pretty-green-phishies dept.

An anonymous reader writes "Stanford University and Microsoft Research have published a study that claims that the new Extended Validation SSL Certificates in IE7 are ineffective (PDF). The study, based on user testing, found that EV certificates don't improve users' ability to detect attacks, that the interface can be spoofed, and that training users actually decreases their ability to detect attacks. The study will be presented at Usable Security 2007 next month, which is a little late now that the new certificates are already being issued."

1 of 84 comments (clear)

Min score:

Reason:

Sort:

Re:Protect your information by slughead · 2007-01-26 02:15 · Score: 0, Offtopic

The best thing you can do is never give out your information. Protect it like you're a secret agent. Protect it against torturous interrogation. Protect it to point of taking that suicide pill hidden as the third button on your shirt.

Dude, calm down. Everyone knows you live in your mom's basement.

--
Latewire