[TrustBar] Test-drive TrustBar open source anti-spoofing/phishingtool

Amir Herzberg herzbea at macs.biu.ac.il
Fri Aug 27 13:46:07 EDT 2004


Ian, thanks. I've removed the anonymous posting option for now so your 
future mails should be with the sender's e-mail - I don't particularly 
like the idea of hiding sender's address to hide from spam anyway.

Yes, installation is as easy as `click here`, but - currently TrustBar 
is a Mozilla extension, so it definitely shouldn't be used on other 
browsers. We can probably extend to Firefly, but I think it's best 
someone else take the lead in providing similar functionality for other 
browsers, possibly of course using our code as a starting point. Hope 
you can try on Mozilla.

Ahmad, please mention the fact we currently require Mozilla in our 
download pages...

Best, Amir Herzberg

trustbar at mozdev.org wrote:

> Congratulations!
> 
> I poked around on the site and found the Installation
> page.  Am I to gather that I should click _here_ where
> it says, and it does it all automatically?
> 
> When I did it in Konqueror - thinking I could download
> first - that didn't help!
> 
> So firing up Firefox, and trying that, it does nothing,
> and the JavaScript console says that it is void, whatever
> that means.
> 
> trustbar at mozdev.org wrote:
> 
>> TrustBar (http://TrustBar.MozDev.org) is a Mozilla extension that 
>> appears as a bar at the top of every Mozilla browser window, 
>> containing site identification by name/logo of the site's owner and of 
>> the certifying authority (the entity that identified that owner of the 
>> site), or a warning `This site is not protected` for unprotected sites 
>> (where TrustBar cannot securely identify the owner). This should help 
>> protect users against spoofing and phishing attacks, which usually use 
>> unprotected sites which appear like the correct login sites.
>>
>> We have been using our prototype personally for some time and it seems 
>> to work well on several platforms, so we now want to offer it to 
>> experienced, security-aware users, for feedback and improvements; our 
>> development is open code so you can also take our code as basis to 
>> your own design. Download and see more info at 
>> http://TrustBar.MozDev.org.
>>
>>
>> ------------------------------------------------------------------------
>>
>> _______________________________________________
>> TrustBar mailing list
>> TrustBar at mozdev.org
>> http://mozdev.org/mailman/listinfo/trustbar
> 
> _______________________________________________
> TrustBar mailing list
> TrustBar at mozdev.org
> http://mozdev.org/mailman/listinfo/trustbar
> 
> .
> 

-- 
Best regards,

Amir Herzberg
Associate Professor, Computer Science Dept., Bar Ilan University
http://amirherzberg.com (information and lectures in cryptography & 
security)
Mirror site: http://www.mfn.org/~herzbea/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: herzbea.vcf
Type: text/x-vcard
Size: 343 bytes
Desc: not available
Url : http://mozdev.org/pipermail/trustbar/attachments/20040827/2f8b0038/herzbea.vcf


More information about the TrustBar mailing list