« Kaminsky Vulnerability Still Present in 10 Percent of DNS Servers | Main | Free OneCare: Killer Generosity from Microsoft? »
November 13, 2008
New Safari Intros Anti-Phishing Measures
Apple released Safari 3.2 today. The big news is that it includes phishing protection similar to that offered by other browsers, but it also includes a number of security fixes (most of which seem to apply to the Windows version of Safari).
The phishing protection takes the form of a bit of text in the upper right corner of a Safari Window. When visiting a site with Extended Validation (EV) SSL certificates, Safari shows the site’s name in that spot, as in this screen shot from a visit to PayPal:
In February, PayPal’s CISO advised users to avoid Safari because of its lack of EV SSL support, which had the predictable effect of upsetting a lot of people who promptly argued that it didn’t matter anyhow.
Now everybody wins. Even though at least one study shows that 70 percent of us ignore the presence (or lack thereof) of EV SSL indicators when our browsers provide them.
Posted by mhall at 6:33 PM | Add Comment
Leave a comment