The Internet Explorer flaw, which was first reported in late November, allowed a browser to display one URL in the address bar while the page being viewed is actually hosted elsewhere, making the user more susceptible to ruses like phishing.
It encouraged surfers not to trust pop-up windows that don't include an address bar or a lock icon that verifies it came from a certified source. Security firm Secunia has warned that many popular web browsers contain a vulnerability that could be...
Nearly a quarter of participants in the research didn't look at the address bar, status bar or security indicators on the phishing sites. Presented with a carefully spoofed Bank Of the West email which directed recipients to the phishing website...
IE 7, Microsoft's newest web browser, will show a green address bar only when displaying a website that has an "extended validation certificate", or EV SSL. This is a new type of security certificate being sold by the same companies that sell...
Davies recommended Extended Valuation SSL (EVSSL) to online retailers, which among other things causes the address bar to turn green if the site is bona fide and red if suspected to be a phishing site.
Cranor's report could be positive news for a company such as VeriSign, which in December launched a tool with Microsoft that changes the colour of the browser address bar when it's displaying a website that has an "extended validation certificate...