A rant about phishing: It's not the user's fault (and not DNS either)