I welcome your suggestions on how browsers can help protect Grandma from the phishing on the computer she already uses.
Using someone else's computer for secure access is always problematic, for reasons far deeper than we're discussing. I will think more on what happens when changing computers though. I don't think the "initial intercept" you're talking about is as dangerous as you suggest. If Grandma gets a brand new computer and types in "building-and-loan.com", she'll reach the correct site. She will trust it once on her new computer and forever after be invulnerable to phishing attacks for that site. That is the ongoing, routine, every day, incredibly expensive problem I want to see solved, not the relatively remote possibility that she'll type "building-and-loan.ru" on a brand spanking new computer.
Using someone else's computer for secure access is always problematic, for reasons far deeper than we're discussing. I will think more on what happens when changing computers though. I don't think the "initial intercept" you're talking about is as dangerous as you suggest. If Grandma gets a brand new computer and types in "building-and-loan.com", she'll reach the correct site. She will trust it once on her new computer and forever after be invulnerable to phishing attacks for that site. That is the ongoing, routine, every day, incredibly expensive problem I want to see solved, not the relatively remote possibility that she'll type "building-and-loan.ru" on a brand spanking new computer.