Remix.run Logo
mdavid626 3 days ago

Does this mean you verify EVERY domain you use? How to even do that?

Shouldn’t this be solved some other ways?

DecoySalamander 3 days ago | parent [-]

I do it by reading domain name and comparing it to what I expect it to be. It's not hard and when in doubt I can easily check WHOIS info or search online for references.

This is also easily avaidable by using password manager which will not autofill credentials on a page with a wrong domain.

Edit: And yes, I do this for every link emailed to me that does anythig more high stakes than point me to a newsletter article.

mdavid626 3 days ago | parent [-]

I think it’s unreasonable to expect that people will do this. Most people have no idea what domain is, they won’t be able to check WHOIS records.