Website Security: IRD Versus My Bank

You’d think that banks and the tax department would have similarly
scrupulous attitudes to online security. But their approach seems to vary
quite a bit.

My bank allows me to middle-click a link to open multiple tabs. This way I
can check on multiple accounts, payment setups etc. And of course right-
click to download statements and other documents.

The IRD does not like me opening multiple windows/tabs when I’m logged
in--it seems to see that as some kind of security violation. Also viewing
documents is complicated somewhat because they insist on using popups,
which my browser blocks. So they show a message saying that displaying the
popup failed, I need to configure my browser to allow popups, which is a
security hole in itself.

Luckily I can usually find a link to download the document for offline
viewing.