--- a/index-respec.html	Tue Jul 27 09:07:45 2010 -0400
+++ b/index-respec.html	Tue Jul 27 09:26:47 2010 -0400
@@ -413,7 +413,9 @@
 the URI on behalf of the person browsing. To log in on a WebID web site there
 is no need to enter any identifier like one has to do for OpenID. Just one click 
 tells the browser to send the WebID URI. The person that is browsing does
-not need to remember either their WebID URI or the website password.
+not need to remember either their WebID URI or the website password, and because
+no password or other secret credential is exchanged with the website, WebID is
+immune from phishing attacks.
 </p>
 
 <p>