ssl / tls session - aware user authentication - or how to effectively thwart the man - in - the - middle .
The battle against phishing: Dynamic Security Skins