347218 - follow what firefox does for phishing for scam emails in tbird

Status: RESOLVED WONTFIX

(Thunderbird :: Security, defect)

Description

[(not reading, please use [e-mail] instead)]

follow what firefox does for phishing for scam emails in tbird

I believe tbird 2.x builds with canvas support, right?

if so, can we do something similar to what firefox does when it detects phishes?

I was thinking something like putting the grey, 50% opaque canvas over the message pane (to capture all clicks, until dismissed), with the bubble pointing up to the scam bar.

See attached screen shot of firefox.

Comment 1

[(not reading, please use [e-mail] instead)]

Attachment: screen shot of firefox anti phish use of canvas

Comment 2

[Adam Guthrie]

Currently we ain't buildin' with the canvas.

Comment 3

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Keeping Bryan on the radar for this...

Comment 4

[Phil Ringnalda (:philor)]

Canvas we have, but this needs to be (marked as) blocked by the bug to get permission to use a downloaded list of phishing URLs, since we aren't going to do it with our current false-positive rate.

Comment 5

[Magnus Melin [:mkmelin]]

Since the link would anyway open (hopefully) in Firefox, I think we can let the browser handle it. Other browsers have similar protection.