On Thu, 22 Feb 2007, Florian Weimer wrote:

> This is the first time I read about the forced window title change. I
> hadn't noticed it earlier. Do you think this is a good enough security
> indicator (or indicator of origin, to be more precise)?

This is quite inadequate as far as protecting inexperienced users is
considered - but at least offers a chance for more alert ones to notice
the problem.

Bypassing it through about:blank elliminates even this opportunity, so
we're back in square one...

/mz

[ reply ]