Hacker News Reader

How would a browser ever know this?

Probably the same way they know which sites are likely to contain malware or be involved in phishing scams: user reports.

Yep. http://news.ycombinator.com/item?id=4555083

I.E. is actually the best at stopping social engineering attacks on your average consumer because of their SmartScreen technology, which relies completely on feedback from the community, both automatic and manual. No reason to downvote this or the original comment IMO.

Of course the browser can't know this. But one clue for the user is if there is a strict length limit.

If you're going to hash my password to 16 characters anyway, why can't I type in 20? But if you're going to store it as plaintext, you need to limit what I input.

Reply on news.ycombinator.com