I clearly understand that the security seals (verisign or norton secure etc.) shown on banking and other websites are generated using a script and available only after an ssl certificate is purchased and installed.
The certificate vendors say "the seal helps improve your customers' perception of safety and trust"
I just somehow can not convince myself with this idea of 'perception of safety'.
- No user is going to click the seal every time to see if it is really a seal by verisign.Most users will be unaware of this feature.
- The image can easily faked for on a phishing site.
- The vendors claim that it is a protection mechanism against phishing and Identity theft.