![]() | |
#31
| |||
| |||
|
|
"John Bokma" <john (AT) castleamber (DOT) com> skrev i meddelandet news:Xns973E93877C020castleamber (AT) 130 (DOT) 133.1.4... "Luigi Donatello Asero" <jaggillarfotboll (AT) telia (DOT) com> wrote: I think that it is better this kind of confusion you are talking about. Perhaps there are less people in Holland who know about phishing. Someone who clicks on a link and goes to a site pretending to be yours probably doesn't notice this (that's the whole point of phishing) Hence, it doesn't matter if you use https, or put big graphics on your site "This is the real thing". Plenty of users have no clue what https is anyway, only that they have to click the fricking Yes button when a certificate is expired. How many phishing sites do you know which use https? |
#32
| |||
| |||
|
|
On Sun, 01 Jan 2006 20:33:59 GMT, "Luigi Donatello Asero" jaggillarfotboll (AT) telia (DOT) com> wrote: "John Bokma" <john (AT) castleamber (DOT) com> skrev i meddelandet news:Xns973E93877C020castleamber (AT) 130 (DOT) 133.1.4... "Luigi Donatello Asero" <jaggillarfotboll (AT) telia (DOT) com> wrote: I think that it is better this kind of confusion you are talking about. Perhaps there are less people in Holland who know about phishing. Someone who clicks on a link and goes to a site pretending to be yours probably doesn't notice this (that's the whole point of phishing) Hence, it doesn't matter if you use https, or put big graphics on your site "This is the real thing". Plenty of users have no clue what https is anyway, only that they have to click the fricking Yes button when a certificate is expired. -- John Perl SEO tools: http://johnbokma.com/perl/ How many phishing sites do you know which use https? Just because nobody has *yet* done it, doesn't mean that they won't. Then again - none of us have been to every site ![]() |
|
doesn't matter if you use http or https - you won't stop phishing by what you are doing - or wanting to do. How are your users going to know if your site is a phished version or not ?......... simple - they won't. |
#33
| |||
| |||
|
|
"Luigi Donatello Asero" <jaggillarfotboll (AT) telia (DOT) com> wrote: "John Bokma" <john (AT) castleamber (DOT) com> skrev i meddelandet news:Xns973E93877C020castleamber (AT) 130 (DOT) 133.1.4... "Luigi Donatello Asero" <jaggillarfotboll (AT) telia (DOT) com> wrote: I think that it is better this kind of confusion you are talking about. Perhaps there are less people in Holland who know about phishing. Someone who clicks on a link and goes to a site pretending to be yours probably doesn't notice this (that's the whole point of phishing) Hence, it doesn't matter if you use https, or put big graphics on your site "This is the real thing". Plenty of users have no clue what https is anyway, only that they have to click the fricking Yes button when a certificate is expired. How many phishing sites do you know which use https? How many people that go to phishing sites have a clue what https is or not? Does your site mimick an existing one? No. Does using https make your site a genuine one? No. https is to set up a secure connection between visitor and site. It doesn't add credibility to the site itself. |
#34
| |||
| |||
|
|
"Paul" <webmaster (AT) houstoncrafts (DOT) com> skrev i meddelandet news:aufgr157im5s6rg81lt827qkpbsudine43 (AT) 4ax (DOT) com... On Sun, 01 Jan 2006 20:33:59 GMT, "Luigi Donatello Asero" jaggillarfotboll (AT) telia (DOT) com> wrote: "John Bokma" <john (AT) castleamber (DOT) com> skrev i meddelandet news:Xns973E93877C020castleamber (AT) 130 (DOT) 133.1.4... "Luigi Donatello Asero" <jaggillarfotboll (AT) telia (DOT) com> wrote: I think that it is better this kind of confusion you are talking about. Perhaps there are less people in Holland who know about phishing. Someone who clicks on a link and goes to a site pretending to be yours probably doesn't notice this (that's the whole point of phishing) Hence, it doesn't matter if you use https, or put big graphics on your site "This is the real thing". Plenty of users have no clue what https is anyway, only that they have to click the fricking Yes button when a certificate is expired. -- John Perl SEO tools: http://johnbokma.com/perl/ How many phishing sites do you know which use https? Just because nobody has *yet* done it, doesn't mean that they won't. Then again - none of us have been to every site ![]() No, but phishing sites are less likely to have a https adress which is certified by Equifax.... for several reasons: a) it costs more b) more people begin talking a lot about these sites and wonder why they have total https.... do not tell me now that you only did it with me... c) https sites probably undergo a wider control, we are talking about websites which use certificates which are recognized by certain authorities d) doesn't matter if you use http or https - you won't stop phishing by what you are doing - or wanting to do. How are your users going to know if your site is a phished version or not ?......... simple - they won't. See above. Do you think that Equifax would be glad to certify phished versions? (click on the padlock on the bottom right corner of the page) |
#35
| ||||
| ||||
|
|
"John Bokma" <john (AT) castleamber (DOT) com> skrev i meddelandet |
|
Does your site mimick an existing one? No. Does using https make your site a genuine one? No. https is to set up a secure connection between visitor and site. It doesn't add credibility to the site itself. I do not agree. |
|
Do you think that Equifax Secure global e-Business CA-1 would be glad to certify phished versions? |
|
(click on the padlock on the bottom right corner of the page) |
#36
| |||
| |||
|
|
On Sun, 01 Jan 2006 21:21:18 GMT, "Luigi Donatello Asero" jaggillarfotboll (AT) telia (DOT) com> wrote: See above. Do you think that Equifax would be glad to certify phished versions? (click on the padlock on the bottom right corner of the page) This is my last email on the subject as it is getting nowwhere. I know about padlocks .......... but how many NORMAL users do ? If I were you, I would concentrate on other things more productive. |
#37
| |||
| |||
|
|
"Luigi Donatello Asero" <jaggillarfotboll (AT) telia (DOT) com> wrote: "John Bokma" <john (AT) castleamber (DOT) com> skrev i meddelandet Does your site mimick an existing one? No. Does using https make your site a genuine one? No. https is to set up a secure connection between visitor and site. It doesn't add credibility to the site itself. I do not agree. Of course not, since you use https. Do you think that Equifax Secure global e-Business CA-1 would be glad to certify phished versions? Some actual phising sites from the past (reported to Paypal): http:// www . losases . com . uy /ssl/pp/ http:// unclejim sw ormfarm.com/secured/ssl/p rocessing/sslusingid- 3957dfceritificate-true-httppaypalsecuredserver/http.paypal.com http://www. loveua ll.net/ http://tabo ufash ions.com/.pgp/.ssh/backup/.7z3kk5f/secured/encryptionkey38572357203 989735secure/ssl.true.route.key100safe35u935839ghw/ssl/process/id- 3957dfceritificate-paypal/http.paypal.com/ Can you explain why unclejimswormfarm.com *can't* get a certification? (click on the padlock on the bottom right corner of the page) Look, you even have to explain to people where to click. Doesn't dat say something? -- |
#38
| ||||||
| ||||||
|
|
"Paul" <webmaster (AT) houstoncrafts (DOT) com> skrev i meddelandet No, but phishing sites are less likely to have a https adress which is certified by Equifax.... for several reasons: a) it costs more |
|
b) more people begin talking a lot about these sites and wonder why they have total https.... |
|
do not tell me now that you only did it with me... |
|
c) https sites probably undergo a wider control, |
|
we are talking about websites which use certificates which are recognized by certain authorities |
|
How are your users going to know if your site is a phished version or not ?......... simple - they won't. See above. Do you think that Equifax would be glad to certify phished versions? (click on the padlock on the bottom right corner of the page) |
#39
| |||
| |||
|
|
"John Bokma" <john (AT) castleamber (DOT) com> skrev i meddelandet news:Xns973E9E1534CDBcastleamber (AT) 130 (DOT) 133.1.4... "Luigi Donatello Asero" <jaggillarfotboll (AT) telia (DOT) com> wrote: "John Bokma" <john (AT) castleamber (DOT) com> skrev i meddelandet Does your site mimick an existing one? No. Does using https make your site a genuine one? No. https is to set up a secure connection between visitor and site. It doesn't add credibility to the site itself. I do not agree. Of course not, since you use https. Do you think that Equifax Secure global e-Business CA-1 would be glad to certify phished versions? Some actual phising sites from the past (reported to Paypal): http:// www . losases . com . uy /ssl/pp/ http:// unclejim sw ormfarm.com/secured/ssl/p rocessing/sslusingid- 3957dfceritificate-true-httppaypalsecuredserver/http.paypal.com http://www. loveua ll.net/ http://tabo ufash ions.com/.pgp/.ssh/backup/.7z3kk5f/secured/encryptionkey38572357203 989735secure/ssl.true.route.key100safe35u935839ghw/ssl/process/id- 3957dfceritificate-paypal/http.paypal.com/ Can you explain why unclejimswormfarm.com *can't* get a certification? (click on the padlock on the bottom right corner of the page) Look, you even have to explain to people where to click. Doesn't dat say something? -- |
#40
| |||||
| |||||
|
|
"Luigi Donatello Asero" <jaggillarfotboll (AT) telia (DOT) com> wrote: "Paul" <webmaster (AT) houstoncrafts (DOT) com> skrev i meddelandet No, but phishing sites are less likely to have a https adress which is certified by Equifax.... for several reasons: a) it costs more "$14.95 SSL Certificates" (Sponsored link on Google). In short, it's nothing. |
|
b) more people begin talking a lot about these sites and wonder why they have total https.... You're the first person I hear stating this. do not tell me now that you only did it with me... Yes. |
|
c) https sites probably undergo a wider control, probably doesn't do it for me. |
|
we are talking about websites which use certificates which are recognized by certain authorities And can be bought for just 14,95. |
|
How are your users going to know if your site is a phished version or not ?......... simple - they won't. See above. Do you think that Equifax would be glad to certify phished versions? (click on the padlock on the bottom right corner of the page) Only the simple fact that you have to tell everybody what to do makes clear what's wrong with your assumptions. Phishing works because people think they are on the real site. I have checked out quite some of those sites, and most I have seen are clearly phishing sites because the URL in the address bar says. Yet a huge number of people don't check that simple fact. Do you really think they are going to click on a padlock, then find out who Equifax is, etc? I have never heard of Equifax. Who tells me I can trust it? |
![]() |
| Thread Tools | |
| Display Modes | |
| |