WebApp Sec mailing list archives

RE: (secure email) Proposal to anti-phishing


From: "Lyal Collins" <lyal.collins () key2it com au>
Date: Tue, 25 Jan 2005 18:14:52 +1100

So, because the clients computer can be broken into, don't deploy a
solution that can prevent phishing?
I'd add " ... that may prevent phishing unless the solution takes this and
all other realistic scenarios/threat vectors into account in order to be
effective for 2-5 years."

The capital investment needed for these these sorts of solutions often means
they have to be paid over over long periods.
A solution that's 'junk' within weeks or a few months of launch is a
massively career limiting move (MCLM) in my view.

Lyal


-- Michael





Current thread: