University study on Phishing

Folks from Harvard and UC Berkley have published this paper on "How Phishing works". It is a research done with studying the behavior of 22 participants on 20 sites. The paper has concluded that the phishing will work as long as users are ignorant of the basics of Computer Security. Also looks like these folks at Harv and UCB have designed and are testing a new approach that allows a remote server to prove its identity in a way that is easy for a user to verify (exploiting the human ability to easily match images) but difficult for an attacker to spoof