Bank website?

posted by (anonymous) at 04:59pm on 25/07/2008
How would the phishing bank site use SSL? The web browser should throw up an error stating that the domain in the SSL cert does not match your browsers domain. Unless I'm missing something here, I think this only works on non SSL sites.
[parent entry] [link] [reply]
 

Re: Bank website?

posted by [identity profile] rfunk.livejournal.com at 06:22pm on 25/07/2008
That won't happen if they redirect a non-SSL page to their own domain, then go to SSL after that.

Many, if not most, bank websites offer account login on the non-SSL homepage. This is a bad thing. (See this recent InformationWeek story for more web-banking badness.)

And most people don't really understand what the browser is saying in the popups -- especially in an age of Windows Vista asking you to approve everything you want to do. It's way too common and easy to click away a popup without really understanding it.
[link] [parent] [reply]

April

SunMonTueWedThuFriSat
        1
 
 2
 
 3
 
4
 
 5
 
 6
 
 7
 
 8
 
 9
 
 10
 
11
 
 12
 
 13
1
 14
 
 15
 
 16
 
 17
 
18
 
 19
 
 20
 
 21
 
 22
 
 23
 
 24
 
25
 
 26
 
 27
 
 28
 
 29
 
 30