[LINK] PayPal to Safari users: 'Ditch it'

[Scott Howard]

On 3/4/08, Rick Welykochy <rick at praxis.com.au> wrote:

> I am using Firefox 2. Their anti-phishing page is here:
>
> http://www.mozilla.com/en-US/firefox/phishing-protection/
>
> How does it work? By checking a blacklist of known phishing sites.
> That is about as effective as the proposals to save Aussie Children
> from the Internet. It simply does not work very well.



Actually for the general unwashed this method works quite well.  Over time
the blacklists are improving and efficacy is getting much better -
especially as unlike the spam message itself (which is normally the trigger
for the user going to a phishing site) the browser request comes much later,
which gives the blacklists time to "catch up".

Email RBL's and the like have become an expected part of most email
solutions now days, and have shown themselves to be highly effective -
especially if done right.  Why shouldn't the same concept be used for web?

  Scott.