Firefox:2.0 QA Activities:TestPlan:Phishing Protection

From MozillaWiki
Jump to: navigation, search

Phishing Protection is a new feature in FF 2.0, and it is designed to provide a warning and a reporting mechanism when a user visits a page that could be a phishing page. Page URLs are checked against a remote or local list of phishing pages, and if one is identified, the user gets a warning dialog. In addition users can report suspicious pages, which could eventually be added to remote and local lists of known phishing pages.

What this document covers: This document covers the basic functionaly of the client side of phishing protection.

What this document does not cover: Server side of phishing protection. For example, when a suspicious page is reported, how is it determined to be a phishing page? When does it get added to the remote (g o o g l e) list of known phishing pages? And how and when does a local list of known phishing pages gets updated?

Phishing Protection Reference

Focus Areas

Basic phishing detection functionality.

Anti-phishing warning UI.

Local list look-up and remote list look-up.

Reporting phishing sites.

Keep in mind

URL redirection to phishing sites.

Warning UI interaction with other browser warnings and events (session store, tabbed browsing?).