A type of browser-based attack, in which the user is fooled into clicking on a link other than the one he thinks he is clicking on, is being highly scrutinized by the web’s top architects. It’s a good thing, too, because as of now, there is no ideal solution to this nefarious exploit.