Hacker News new | past | comments | ask | show | jobs | submit login

That would be tough, because most people use one or two email addresses for basically all their accounts. And unless you're storing all their passwords, which would be a sketchy thing to turn on by default, there's no way to tell if they just put in their Gmail credentials or they really meant to log into gmal.ru. And actually even if you're storing their passwords, a lot (most?) people use the same password for lots of different logins. So I don't think there's a way to consistently do this, unless you combine it with a password manager that guarantees the user isn't duplicating passwords across different logins.



Yeah, this specific idea might only work well if you're using a password manager. But it was only an example. It could be something as simple as, "You've never submitted a secure form to this site. Please check the address carefully." If you think it's Gmail, that would be an unexpected alert.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: