Patent ID: 8776214

Claim:
A method, comprising: receiving, via an authentication manager executed by a client, data encoding a security credential specification from a first at least one network site; generating, via the authentication manager executed by the client, a first security credential based at least in part on the data encoding the security credential specification; generating, via the authentication manager executed by the client, a second security credential based at least in part on data encoding a security credential specification that is associated with a second at least one network site and supplied by a user; sending, via the authentication manager executed by the client, a request to create an account associated with the first security credential from the client to the first at least one network site; sending, via the authentication manager executed by the client, a request to create an account associated with the second security credential from the client to the second at least one network site; storing, via the authentication manager executed by the client, the first security credential, the second security credential, a first trusted certificate associated with the first at least one network site, and a second trusted certificate associated with the second at least one network site; refraining from providing, via the authentication manager executed by the client, the first security credential to the first at least one network site at an authentication endpoint in response to determining that a third trusted certificate provided by the first at least one network site does not match the first trusted certificate associated with the first at least one network site; and refraining from providing, via the authentication manager executed by the client, the second security credential to the second at least one network site by form filling in response to determining that a fourth trusted certificate provided by the second at least one network site does not match the second trusted certificate associated with the second at least one network site.