Re: [Asrg] How would SPF or Sender ID stopped this attack

[Barry Shein <bzs at world.std.com>]

Or maybe banks can't use general-purpose browsers and should
distribute plug-ins or even custom-written programs th their customers
with security built-in.

Maybe it's the something for nothing aspect which is impossible (that
is, expecting near-perfect security via a browser/website.)

People get defrauded over the telephone all the time. Ya know, when
someone calls me claiming to be from a bank I do business with or even
some three letter law enforcement agency asking questions etc my first
and last words are: Give me a number I can call you right back on,
preferably via a front desk I can give your name to, and I will
immediately call you back...3...2...1...no? <click>

-- 
        -Barry Shein

Software Tool & Die    | bzs at TheWorld.com           | http://www.TheWorld.com
Purveyors to the Trade | Voice: 617-739-0202        | Login: 617-739-WRLD
The World              | Public Access Internet     | Since 1989     *oo*

_______________________________________________
Asrg mailing list
Asrg at ietf.org
https://www1.ietf.org/mailman/listinfo/asrg