[TrustBar] Alpha release of version 0.4
Amir Herzberg
herzbea at macs.biu.ac.il
Mon Jun 27 16:32:01 EDT 2005
For experienced users (only): we are in testing and finishing phases of
version 0.4 for FF, and after using the 4th alpha release for some time,
I think I can invite others to try it. It's a major re-write, mostly by
Vladimir and Roei.
You can download it from a new `TrustBar home page` I've made at
http://AmirHerzberg.com/TrustBar. Comments on the release and page are
very welcome!
Main changes:
-- Avoiding pop-ups; user can name the site directly on TrustBar (like
`petname` toolbar; thanks to Tyler for the petname concept,
implementation, and to Marcs for explaining to me the importance of
avoiding pop-ups; I'm completely converted by now)
-- More compact... as a regular toolbar now. [well, this does open some
possibility for spoofing by a site - removing TrustBar and installing a
fake one. but this is not very relevant, really, since I am quite sure
that by the time TrustBar is popular enough to justify this attack, it
will be incorporated in browser - where preventing this is trivial. And
we have several techniques we may deploy against this as well. Anyway we
were the only `bar` which was so `paranoid`]
-- Provides value even in unprotected pages, in particular: displaying
only the domain part of the URL (like spoofguard) and allowing renaming
it (`petname` - to unprotected sites, based on URL). We believe this
will increase awareness of users - to be tested in further usability
tests...
The final 0.4 version will also be (hopefully) signed, thanks to our
friends at VeriSign who provided us with free code-signing cert (and
also to Comodo who also offered). But not the alpha version yet. Plus,
we also hope to include in it the logos of at least the major CAs. [CA
folks: if you want product differentiation - we should communicate on
appearance!! if we don't hear from you soon it won't make it to 0.4]
An IE version is in the works (i.e. runs on my laptop but I think it
still needs some more work).
Best regards,
Amir Herzberg
Associate Professor
Department of Computer Science
Bar Ilan University
http://AmirHerzberg.com
New: see my Hall Of Shame of Unprotected Login pages:
http://AmirHerzberg.com/shame.html
More information about the TrustBar
mailing list