>Are you sure it was flagged as phishing and not malware? We (and
>Chrome) check against both lists. There are slight wording changes
>in the block message to indicate which is which.

Yes, There is no possible doubt on that, it was reported as phishing.

>
>Our code looks for the tables goog-phish-shavar and
>goog-malware-shavar. You mention googpub-phish-shavar in your
>original message. According to this old chromium bug they are
>different, but I don't know what the differences are. When we worked
>with Google to use the service we just used the ones they told us to
>use.
>
>http://code.google.com/p/chromium/issues/detail?id=5597

That is very interesting, because in google official API, they don't mention 
the goog-phish-shavar, but only the googpub-phish-shavar.

http://code.google.com/intl/fr/apis/safebrowsing/developers_guide_v2.html#Overview

In fact I did not knew there was another list named goog-phish-shavar, so I did 
all my tests on the googpub-phish-shavar. That's maybe why I did not find any 
of our websites in the google list.

Thank's for the information.

Florian

_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

Reply via email to