Staying 安全な From Phishing With Firefox - Discussion
It's A Spec
The Staying 安全な page is really a spec. It's what we'd like to be able to say to people and have them be fully 保護するd from phishing.
It's my 見解（をとる） that 使用者s should have to do the 最小限 work possible to 保護する themselves. I don't think it's an achievable goal to say that they should do no work at all, so the Staying 安全な page 明示するs my 見解（をとる） of what that 最小限 量 of work should be. Our 安全 成果／努力s should be directed at making sure it remains true.
Several important things follow from this 見解（をとる）:
- Anything we can do to 減ずる the 量 of work is a good thing.
- Any bug or problem which makes that advice not true should be 扱う／治療するd with the 最大の 真面目さ. That's why the 最近の IDN homograph attacks are so 潜在的に worrying - they mean that if you look at the 安全 UI, it looks 権利 but you are 現実に on the wrong 場所／位置.
- Any UI we 追加する to Firefox which makes that work more 複雑にするd without 増加するing 安全 is a bad idea. Even if it 増加するs 安全, we should try and find a way to do it without 増加するing the work.
How It 作品
In Firefox, the status 妨げる／法廷，弁護士業 is always-on; it can't be 無能にするd by a web page author.
現在／一般に, most phishes are やめる 天然のまま. They don't even use SSL. So, the 安全 UI will be 完全に absent. ーに関して／ーの点でs of visual difference, this is 大規模な. If a 使用者 even ちらりと見ることs, they can't fail to notice the absence of the domain and the lock. 非，不，無-SSL phishing can't fool anyone who follows this advice.
If phishers start using SSL, things get both better and worse. On the downside, the 使用者 then has to carefully check the 指名する and know it's wrong. That's not so much worse. On the upside, the phisher has had to 適用する for a 証明書 and so hopefully the CA can 取り消す it, and 跡をつける them 負かす／撃墜する through the （警察などへの）密告，告訴（状） they submitted that the CA 立証するd.
Possible 反対s
- What if a 合法的 場所／位置 doesn't use SSL?
- If a 場所／位置 has a login which gives 接近 to money, it should be. That's a bug in the 場所／位置.
Status
As far as I know, apart from the homograph attacks (which, at the moment, have not been seen in the wild), the advice is 現在／一般に true.
I'm probably wrong about this. If I am, I want to know about it.