Comment by bluesign

I don't get this, what about malware pretending to be a browser? Is there a protection against this in protocol