Hacker News new | ask | show | jobs
by tthomas48 4509 days ago
Does the phrase "bank grade security" actually inspire confidence in anyone? My bank still doesn't have 2-factor auth.
3 comments

For people who don't even know what 2-factor authentication is, I'm sure it does.

>Calls to action, you know, the little text on your button of “sign up” or “start doing whatever now,” prominent graphical elements and important micro copy.

>Thirty-seven signal pages are really good for this, you know, if you look at any of their signup pages right to the side of the actual form, they’ll have a micro copy that’s designed to address your objections against doing that form.

>So right next to any email submission they’ll say, “Don’t worry, we won’t spam you. Here’s why.” Right next to a credit card thing: “This is totally secure. We use bank level security,” which, as we all know, means absolutely nothing, but people really respond to it.

http://businessofsoftware.org/2012/03/patrick-mckenzie-patio...

Also, Secure Sockets Layer makes me think "ouch, that sounds really vulnerable even to me (non-specialist)". It's Transport Layer Security since, well, 1999.
do you have better phrasing? suggestions welcome ;-)
No idea, but maybe just, well, "strong"?

And maybe something informational (like "TLS-DHE-RSA-WITH-AES256-CBC-SHA" or "Capable of TLS with ephemeral Diffie-Hellman key exchange (providing forward secrecy) and AES-256 in CBC mode with SHA-1 for MAC" instead of just "AES-256") or (if that don't hurt business) a description or link like this https://www.ssllabs.com/ssltest/analyze.html?d=xen.do at "Find out more" (also, see, there are some suggestions to improve security, and you also have "http://xen.do" links in your HTML that makes browsers complain about insecure content on page)

Disclaimer: I have no relation to SSLLabs at all, except for using them (and considering them a great service) to ensure my TLS is okay. I have no expertise in cryptography. I have no serious experience with SEO or business advertisement. Just my thoughts.

thanks for the suggestion, will look into it