Paypal is the world's leading online payment service Web payment firm Paypal has said it will block "unsafe browsers" from using its service as part of wider anti-phishing efforts. Customers will first be warned that a browser is unsafe but could then be blocked if they continue using it. Paypal said it was "an alarming fact that there is a significant set of users who use very old and vulnerable browsers such as Internet Explorer 4". Phishing attacks trick users into handing over sensitive data. Paypal said some users were still using Internet Explorer 3 , released more than 10 years ago. It lacks many of the security and safety features needed to protect users from phishing and other online attacks. Legitimate sites Paypal said it supported the use of Extended Validation SSL Certificates. Browsers which support the technology highlight the address bar in green when users are on a site that has been deemed legitimate. The latest version of Internet Explorer support EV SSL certificates, while Firefox 2 supports it with an add-on but Apple's Safari browser for Mac and PCs does not. "By displaying the green glow and company name, these newer browsers make it much easier for users to determine whether or not they're on the site that they thought they were visiting," said Paypal. The steps were outlined in a white paper on managing phishing, written by the firm's chief information security officer Michael Barrett and Dan Levy, director of risk management. In it, they said: "In our view letting users view the PayPal site on [an unsafe] browser is equal to a car manufacturer allowing drivers to buy one of their vehicles without seatbelts." Paypal described the battle against phishing as a "fast-moving chess match with the criminal community".
E-mail this to a friend Printable version Bookmark with: Delicious
Digg
reddit
Facebook
StumbleUpon What are these?
La empresa de Internet, PayPal, declaró al navegador web Safari como vulnerable para ser usado en su sitio web, ya que no soporta el certificado de seguridad EV SSL.

Este certificado es calificado por la empresa de pago en Internet como esencial para combatir el phising, por lo cual su acceso al sitio web será bloqueado, junto con navegadores antiguos, como Internet Explorer 3, 4 y otros browsers antiguos que no poseen herramientas contra el phising. Por esto, los usuarios de Mac o PC que usen Safari para navegar por este sitio, serán bloqueado tras iniciar la sesión en el portal.

Bajo esta misma óptica, el navegador Mozilla Firefox tampoco cumple con incluir este certificado, pero mediante una extensión es posible incluir dicho certificado, por lo cual los usuarios de Firefox 2 no se verán afectados tras la instalación de la extensión.

Esta noticia se conoce a días que Apple haya lanzado un parche de seguridad para Safari.