Sigbjørn Vik wrote: > XSS is a serious issue on the web, but it is well known how to fix it. > Phishing is an even worse issue on the web, with no simple ways for > fixing. Fixing a serious issue at the cost of an even worse one seems > like a suboptimal tradeoff, especially when an almost identical solution > exists without the tradeoff. I think I'm lost... how does this relate to phishing? I can't agree that that phishing is worse than XSS, but maybe we mean different things by phishing because I don't see the connection. What is the "almost identical solution... without the tradeoff"? Simply dropping paths as Mike suggested? Sorry for being dense but this is a long thread and I'm not entirely sure which of the suggested solutions you mean. -Dan VeditzReceived on Tuesday, 18 February 2014 18:15:09 UTC
This archive was generated by hypermail 2.3.1 : Monday, 23 October 2017 14:54:04 UTC