WebApp Sec mailing list archives

Re: (secure email) Proposal to anti-phishing


From: Michael Silk <michaelsilk () gmail com>
Date: Tue, 25 Jan 2005 01:35:15 -0800

Lyal said:
On Tue, 25 Jan 2005 18:14:52 +1100, Lyal Collins
<lyal.collins () key2it com au> wrote:
So, because the clients computer can be broken into, don't deploy a
solution that can prevent phishing?

I'd add " ... that may prevent phishing unless the solution takes this and
all other realistic scenarios/threat vectors into account in order to be
effective for 2-5 years."

So, re-worded it would be: "imho its pointless to deploy something
[...] that doesn't work."

...


A solution that's 'junk' within weeks or a few months of launch is a
massively career limiting move (MCLM) in my view.

Who's disagreeing with you ?

Anyway, I'll leave it there.

-- Michael


Current thread: