Recently, the Shmoo Group discovered that Firefox is vulnerable to precisely the exploit that i predicted in my 2002 paper—Ping

➡

You need more than just pet names.—Ian

➡

Huh? How is it that Pet Names don’t solve this problem?—Mark

➡

Firstly, as above, the browser needs to index from the cert, and currently does not.—Ian

➡

And pet icons should be introduced into the mix as well. In CapDesk, users pick both a pet name and a pet icon for an application. The pet icons exploit the value of graphical presentations too.—marcs