I welcome your suggestions on how browsers can help protect Grandma from the phishing on the computer she already uses.<p>Using someone else's computer for secure access is always problematic, for reasons far deeper than we're discussing.  I will think more on what happens when changing computers though.  I don't think the "initial intercept" you're talking about is as dangerous as you suggest.  If Grandma gets a brand new computer and types in "building-and-loan.com", she'll reach the correct site.  She will trust it once on her new computer and forever after be invulnerable to phishing attacks for that site.  <i>That</i> is the ongoing, routine, every day, incredibly expensive problem I want to see solved, not the relatively remote possibility that she'll type "building-and-loan.ru" on a brand spanking new computer.