Boris Zbarsky wrote:

No.  The URL is in the address bar.  That's not the same thing:

http://[EMAIL PROTECTED]/login/foo?value=reallylongthingbecauseICan

vs

  EVIL.COM

Not that that would necessarily help with www.citibank.com.evil.com, mind you. ;)
OK, got you....
--
Regards

Signer:      Eddy Nigg, StartCom Ltd.
Phone:       +1.213.341.0390

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security

Reply via email to