455
edits
CFA/Security-Notes: Difference between revisions
Jump to navigation
Jump to search
no edit summary
No edit summary |
|||
| Line 90: | Line 90: | ||
** automatically fills out forms | ** automatically fills out forms | ||
** generates unlimited number of encrypted, unique passwords and disposable email addresses | ** generates unlimited number of encrypted, unique passwords and disposable email addresses | ||
* | * Browser handles password generation; single password (FF extension - Magic Password Generator, IE extension - Password Scrambler) | ||
** Uniquely scrambles your single password for every site you visit | ** Uniquely scrambles your single password for every site you visit | ||
| Line 117: | Line 117: | ||
=== Other === | === Other === | ||
* Automated update - always checks to see if you're running the latest version, and notifies you when a security update is available (FF) | * Automated update - always checks to see if you're running the latest version, and notifies you when a security update is available (FF) | ||
* Word of mouth security | |||
** Social networks - 7 of your Facebook friends have purchased from this site | |||
** Personal sources - Your computer-savvy cousin says this site is safe | |||
** Online ratings - This site has 25 unresolved complaints according to BBB, and a reseller rating of 6.2 | |||
* Security history | |||
** You've been to this site before | |||
** Nothing's changed since the last time you were at this site | |||
** You're sending a password to a site that you've never visited | |||
* Browser Lock Down - remove security decisions from the user as much as possible; determine behavior based on configuration | * Browser Lock Down - remove security decisions from the user as much as possible; determine behavior based on configuration | ||
* Personally Identifiable Information Bar | * Personally Identifiable Information Bar | ||
* Page Security Scoring - use standard formula to calculate a score to provide consistent and trustworthy security context semantic to users | * Page Security Scoring - use standard formula to calculate a score to provide consistent and trustworthy security context semantic to users | ||
* Tech smarts | * Tech smarts | ||
** Secure Remote Password Protocol | ** Secure Remote Password Protocol | ||
** Watch for credit card numbers going out on the wire | ** Watch for credit card numbers going out on the wire | ||