Use case: possible malware installation

For further discussion; I think that this motivates some in-scope
questions and might help to illustrate some aspects that are out of
scope.  Here we go:

	Alice visits a Web Site where banner advertising touts an
	anti-phishing toolbar for her browser.  Alice follows the
	banner advertising, and is asked whether she really wants to
	install the toolbar.
	
	This toolbar, when installed, is able to arbitrarily change
	browser behavior. It is expected to submit information about
	Alice's online behavior to a third party.
	
	The security decision hat Alice is expected to make is
	whether or not to install this piece software, based on a
	judgment whether or not this is malware.

Regards,
-- 
Thomas Roessler, W3C  <tlr@w3.org>

Received on Tuesday, 9 January 2007 12:41:37 UTC