Opera, Firefox - securitate

Opera's approach: the fraud protection server

When Opera Fraud Protection is enabled, you contact a server at Opera every time you request a Web page. HTTPS sites are checked via an encrypted channel, while IP addresses on the local intranet will never be checked. The server checks the domain name of the requested page against live whitelists compiled by GeoTrust, and blacklists compiled by GeoTrust and Phishtank. Opera's fraud protection server downloads blacklists directly from Phishtank, and sends a query to GeoTrust.

The domain name is forwarded to GeoTrust in plain text, together with a hash of the URL, if the site you are checking is served by HTTP. The full URL is not sent, but a fingerprint of the full URL is needed in case you visit a dangerous page on a site that is otherwise harmless. The reply is an XML document containing the trust level of the domain. This reply will be cached for a time indicated by the Opera's fraud protection server. Information about well-trusted sites can be cached for a longer period than for unknown sites.

The privacy implications of Opera's Fraud Protection can be summarized as follows:
By default, Opera Fraud protection is disabled. The browser never makes contact with the fraud protection server when Opera Fraud Protection is disabled. To enable the feature, select from the menu Tools > Preferences > Advanced > Security , and check the box marked "Enable Fraud Protection."
With Opera Fraud Protection enabled, the domain name of Web sites you visit is sent to Opera's fraud protection server together with a hash of the complete URL. No information goes directly to third parties, and the information that is forwarded to whitelist/blacklist providers is not connected to your identity. HTTPS sites are checked via an encrypted channel, while IP addresses on the local intranet will never be checked.
Although Opera's fraud protection server stores the domain name and the security status of the Web sites you visit, it does not save your IP address or any other information related to your identity. There are no cookies or other session information.
You can at any time disable Opera Fraud Protection in preferences, by choosing Tools > Preferences > Advanced > Security , and unchecking the box marked "Enable Fraud Protection."

The user interface

With Opera Fraud Protection enabled, every Web page you request is subjected to a phishing filter, and the status of the page is displayed as an icon on the right side of the address field, as indicated in the table below. Clicking on the icon opens a dialogue box with additional information, including the possibility of reporting a site as suspicious, with an explanation. Protocol Address Field Fraud Protection Dialogue
HTTP i VERIFIED
HTTP ? NOT VERIFIED
HTTP [glow=red,2,300]! Fraud Site[/glow] WARNING
HTTPS [glow=yellow,2,300]Secure Site[/glow] VERIFIED

A secure page (HTTPS) with valid security certificate and no mis-configuration of the server will display a lock on the right side of the address field, and clicking on this lock will cause the security information for the page to be displayed, including information about the Web site's certificate. In this case, too, the page will be checked by Opera's fraud protection server.

If a Web site is found on the blacklist, you will be presented with a warning page, and you must decide whether to visit the fraudulent Web site, or to return to the home page. Opera's fraud protection server does not cause any delay in the opening of Web pages.

Bine, alea-s specifice Opera. Eu ma refeream strict la Bookmarkuri.