- From: Mary Ellen Zurko <Mary_Ellen_Zurko@notesdev.ibm.com>
- Date: Mon, 11 Dec 2006 11:11:35 -0500
- To: "Maritza Johnson <maritzaj" <maritzaj@cs.columbia.edu>
- Cc: public-wsc-wg@w3.org
Received on Monday, 11 December 2006 16:11:52 UTC
> 3) The other two are interesting, but this one is especially neat > from a usability point of view ( ... I'm actually on MySpace, so I > can comment from the standpoint of a user). > > Within MySpace there are certain pages you can view without being > logged-in, and some that require you be logged in before viewing. > This means users are accustomed to seeing the log-in prompt > displayed by the phishing profile at random times ... seeing a log- > in after clicking on any link doesn't trigger any warning message to > the user because they've been trained that this is normal behavior > for MySpace. This is particularly interesting to me because the Notes rich client used to authenticate whenever it first needed to. But we found that users didn't like that, and it confused them, so for several major versions we've authenticated on client startup. Mez
Received on Monday, 11 December 2006 16:11:52 UTC