Re: Accessibility for trustworthiness indicators

Thanks Chaals,

>> I'm working on phishing prevention, and am concerned with
>> accessibility for people with disabilities. I'm afraid but
>> many security information, e.g., address bar colored green,
>> is really important for distinguishing legitimate sites, but
>> individuals with visual impairment are hard to recognize it.
(snip)
> Normal browser security indicators in toolbars are only sometimes
> available to screenreaders.
> 
> But browsers often put up a warning page when a user tries to navigate
> to something marked as malware by a browser, and that page is generally
> "reasonably" accessible to screen reader users.

Yes it is right when a browser succeeded to identify malicious entities.
I'm afraid but some phishing sites will be shown to users
even they use the latest version of browser and security software.

> I think the common problems are:
> 
> 1. email-based attacks, as you note. I believe some webmail services
> provide some protection from attachments, but I am not sure if dedicated
> email clients do the same.
>
> 2. Normal websites, that ask for sensitive information such as passwords
> which can be used to spend real money, on pages that are not secure. In
> many cases screen reader users don't *know* whether the page is secured.
>
> As well as providing shortcuts to security information - which can be
> done in browsers today - having the ability to state the security state
> in the title of the page, so it cannot be faked by the page itself,
> would be a simple technique for browsers to implement.

Yes. The shortcut for accessing security information is usually appeared
as visual elements. I think, keyboard shortcut will be of benefit for
people with visual impairment.

Kind regards,
Daisuke