Netscape Navigator 4.0 (NS4) would let a page open new browser windows, but if you wanted to hide the Navigator UI (the stuff above "The Line of Death" in this article), you needed to sign your scripts with your developer certificate.<p>The Netscape Security Team was worried about UI spoofing, the browser-in-a-browser attack.
- <a href="https://news.ycombinator.com/item?id=30722033" rel="nofollow">https://news.ycombinator.com/item?id=30722033</a><p>Alas, they need not have bothered. Users didn't notice fakes, and got mad if a web application was blocked. The whole apparatus to support public-key certification of web elements was pulled in later versions of Netscape.<p>25 years later, and essentially no one thinks about bad guys before dutifully typing their password.<p>Microsoft Windows tried. Windows shows a distinctive, full screen alert if you want to do something with elevated priveleges. Windows supports custom security policies and signed PowerShell scripts.<p>But the only way to prevent users from leaking authentication is to require auth that can't pass over a network. 2FA with local (not remote) physical token.