Up Next: Quarantine Phishing (Was: Dutch ISPs to collaborate and take responsibility for bottedclients)

Wed Oct 7 14:20:47 UTC 2009

On Tue, 6 Oct 2009, Jeroen Massar wrote:
> The problem with all of that boils down to what people have to
> believe... and how to properly inform them of that...

How many people remember this oldie, but goodie?

   3.3.2.1.1 Trusted Path
   The TCB shall support a trusted communication path
   between itself and users for use when a positive TCB-touser
   connection is required (e.g., login, change subject
   security level). Communications via this trusted path
   shall be activated exclusively by a user of the TCB and
   shall be logically isolated and unmistakably
   distinguishable from other paths.

Its simple to say, hard to do.