Another lesson is to always host the login section on a sub domain of the company which website you visit. A prime example not to follow is Citibank in Europe. My account is with citibank.co.uk, but when I login to my account I get redirected to online.citi.eu. How do I know that citi.eu belongs to Citibank? I have no relationship with citi.eu, that’s not the website I visited. How do I know I can trust it?
Microsoft is another major offender. When logging in, I get redirected 20 times between various domains, none of which in microsoft.com
Microsoft is another major offender. When logging in, I get redirected 20 times between various domains, none of which in microsoft.com