[cap-talk] a datapoint in the "secret bookmarks" / "secret links" discussion

[Toby Murray]

the following is from a message from Adam Shoestack to cryptograhy on 
high assurance CA certificates. (Something I'm sure we all see the 
problems with. Ian's blog, of course, contains details on this as well.)

"Higher assurance means that when the CA gets duped, it's even better 
for the phishers, because that nice, reassuring green bar will be there. 
To preserve the internet channel as a means of communicating with 
customers, we need to move to bookmarks, not email with clickable URLs. 
That method is a black hole."

I still dig the "secret link" term. I think there's obvious room for 
both, with "secret bookmark" being the less general term that is 
specifically applicable to the web browser and its current UI.

-- 
Toby Murray
Advanced Computer Capabilities Group
Information Networks Division
DSTO, Australia

IMPORTANT: This e-mail remains the property of the Australian Defence
Organisation and is subject to the jurisdiction of section 70 of the
Crimes Act 1914. If you have received this e-mail in error, you are
requested to contact the sender and delete the e-mail.