Re: This is why I never use webmail
You can say that users choose easy password, but what if the password was remembered by the browser but never told to the user? In that case, the password could potentially be more secured... until we found out that the alternatives are also just as bad.
In an office environment, if you don't or can't use webmail, you use Outlook. Guess what, Outlook (SMTP) download the attachment on the pc and pretty much let the user click on it quicker and easier. In addition, you won't get the hint from the blurry image but only the extension. What's the chance a typical user see the title legit and click on the attachment?
There is no easy way to fix the incompetence.