> Every time you're about to paste your password, glance at the url bar.
Actually - I disagree with this. You can no longer "glance" at the url bar to determine if you are on the right domain due to Unicode chars if you clicked a link.
The only safe way is to type the url yourself into the browser.
If it is a long link - then at least typing the base domain, and pasting the "rest" is probably safe?
This actually isn't true. A website like https://www.xn--80ak6aa92e.com/ won't show up as apple.com. Browsers don't allow Unicode rendering in the URL bar.
Maybe IE is affected though. I haven't tested every browser. But it's a known security concern.
Thank you. That gives me a strong reason to update.
To answer your question, (1) it's pretty arduous to install Chrome from the AUR, and (2) I am wary of Google removing useful functionality from Chrome.
Actually - I disagree with this. You can no longer "glance" at the url bar to determine if you are on the right domain due to Unicode chars if you clicked a link.
The only safe way is to type the url yourself into the browser.
If it is a long link - then at least typing the base domain, and pasting the "rest" is probably safe?