Other nomination
iPhone SSL Warning and Safari Phishing
Mobile Safari's invalid-certificate prompt does not say which host the certificate belongs to, so a 1x1 iframe pointing at an HTTPS site with a bad certificate asks the user to accept something they cannot attribute. The acceptance lasts the whole browser session, letting a wifi man-in-the-middle pre-accept a certificate before the victim reaches their bank.
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.