User security isn't the browser's strong point

Feb 29, 2008 08:48 GMT  ·  By

Well, "the world's best browser" seemingly doesn't fit the "safe" profile, according to PayPal, who has recently put up a list of recommended browsers. Unsurprisingly, Safari is not among them, for it still doesn't fully protect non-savvy users from phishing sites, for example.

"Safari protects your personal information when you surf the web on a shared or public Mac. Go ahead - check your bank account and .Mac email at the library or shop for birthday presents on the family Mac. Safari also uses strong 128-bit encryption when accessing secure sites such as your bank or an online store, so you can transmit account and payment information with confidence," Apple describes its browser.

This of course doesn't help one bit when you willingly input your credentials for phishers to use and suck you dry. According to PayPal, a safer browser has the following characteristics: latest version, automatic software patches and upgrades, anti-phishing functionality to notify you when you try to access a suspected fake website and 128-bit encryption that protects data during transmission.

Plugins like Saft aid vulnerable users in some way, adding a bunch of security features aside full-screen browsing, searchable bookmarks and history, URL shortcuts and kiosk mode.

Then of course, there's 1Password which, although it integrates superbly with most browsers as well as with Safari, it isn't a part/feature of Safari, so logically, PayPal's list of safe browsers couldn't include Apple's browser.

Agile Web Solutions, the guys responsible for the multiple-award-winning password manager called 1Password, have also introduced the app to the iPhone. The 1Password 2.5.1. password assistant for iPhone is free to registered users and it improves 1Password for iPhone, also adding support for AutoFill in Mobile Safari.

Using 1Password, Mac and iPhone users can easily manage hundreds of passwords with one master key. People usually keep one or at most two passwords for their login sessions, which, although seems like a good idea at first, doesn't help much when it comes to phishing sites.