Re: Up Next: Quarantine Phishing (Was: Dutch ISPs to collaborate and take responsibility for bottedclients)

[Sean Donelan <sean () donelan com>]

On Tue, 6 Oct 2009, Jeroen Massar wrote:
> The problem with all of that boils down to what people have to
> believe... and how to properly inform them of that...

How many people remember this oldie, but goodie?

  3.3.2.1.1 Trusted Path
  The TCB shall support a trusted communication path
  between itself and users for use when a positive TCB-touser
  connection is required (e.g., login, change subject
  security level). Communications via this trusted path
  shall be activated exclusively by a user of the TCB and
  shall be logically isolated and unmistakably
  distinguishable from other paths.

Its simple to say, hard to do.