Friday, December 14, 2007

Coloring URLs

Hash your current URL into a pattern of colors around the browser frame. Then users can associate repeated visits to the same site with the same colors. It may guard against IDN and typo attacks and also helps establish an identity for opaque site names such as on the Onion network or Freenet SSKs.

Each browser should use a different color hashing scheme, like HMAC, in order to thwart an attacker from brute force trying to design a similar-colored spoof site as the target. You can fool some of the people some of the time, but not all the people all the time.

No comments :