Re: Stopping (https) phishing

On 2018-07-12 14:19, Henry Story wrote:
> Dear Web Security group members,
> 
>    I have recently written up a proposal on how to stop (https) Phishing,
> which has grown 6 fold in the past year according to the Anti Phishing
> Working Group, and a lot more according to Symantec researchers I talked to
> recently.
> 
> I am looking into this as part of my PhD at Southampton, which is a mix
> between Web Science, Cybersecurity and Social Machines. Bringing these
> fields together opens up as I believe you will see reading this, new ways
> of thinking of problems that have been dogging us for a while.
> 
>    https://medium.com/cybersoton/stopping-https-phishing-42226ca9e7d9
> 

Here is a related proposal, also in need of a peer review:
https://github.com/cyberphone/qr-replacement#a-better-qr

Anders

> There is also a response to a couple of questions by Ben Laurie on Twitter
> where I go into a bit more detail on how this solves the UI part of the
> problem.
> 
>    https://medium.com/@bblfish/response-to-remarks-on-phishing-article-c59d018324fe
> 
> I am very keen to hear your feedback on this. As TPAC will be in Lyon which
> is a reasonable distance from where I live I may be able to make it there
> to talk about improvements on this proposal following your feedback.
> 
> Sincerely,
> 
>    Henry Story
>    http://bblfish.net/
> 

Received on Thursday, 12 July 2018 14:33:22 UTC