Comment on Show HN: Collections, a fast multiple-account Google Docs client for MacparentComments−nestlequ1k14ySince you are framing in the login with webkit, why not show the URL as well? User's need to see htts://google.com or they'll assume it's a phishing attack.−ryanwaggoner14yHow is this actually any more secure? It's pretty easy to display a legit (but "fake") URL while your phishing form is displayed in the webview.
Comments
Since you are framing in the login with webkit, why not show the URL as well? User's need to see htts://google.com or they'll assume it's a phishing attack.
How is this actually any more secure? It's pretty easy to display a legit (but "fake") URL while your phishing form is displayed in the webview.