Stopping (https) phishing

Dear Web Security group members,

   I have recently written up a proposal on how to stop (https) Phishing,
which has grown 6 fold in the past year according to the Anti Phishing 
Working Group, and a lot more according to Symantec researchers I talked to
recently. 

I am looking into this as part of my PhD at Southampton, which is a mix
between Web Science, Cybersecurity and Social Machines. Bringing these
fields together opens up as I believe you will see reading this, new ways
of thinking of problems that have been dogging us for a while.

   https://medium.com/cybersoton/stopping-https-phishing-42226ca9e7d9

There is also a response to a couple of questions by Ben Laurie on Twitter
where I go into a bit more detail on how this solves the UI part of the
problem.

   https://medium.com/cybersoton/stopping-https-phishing-42226ca9e7d9

I am very keen to hear your feedback on this. As TPAC will be in Lyon which
is a reasonable distance from where I live I may be able to make it there
to talk about improvements on this proposal following your feedback.

Sincerely,

   Henry Story

Received on Thursday, 12 July 2018 12:16:46 UTC