That's a great concept which I need to try.  The challenge will be extending it to SSL and making it friendly to Grandma.<p>That said, when Grandma first signed up at building-and-loan.com, she probably went to the correct site.  Now that she has trusted that site, she won't be fooled by phishing sites asking her to enter her building-and-loan.com password.  Her browser will play a message from Wilford Brimley warning her about the new site.<p>Of course when she <i>first</i> went to the building-and-loan.com site, she also got the warning from Wilford Brimley, which might have alarmed her.  I suppose the warning would have to say "If you are signing up at this site for the first time, just make sure you came here by clicking a link that you trust."  Grandma then thinks "well gee, I just clicked here from the Association for Golden Girls web site, so I should be fine."