Ian,

I suggest you remove Ponzi's from your threat model. Fraud involves a misrepresentation made to motivate the victim to voluntarily hand over his goods under false expectations. This is not a browser-specific threat. There is nothing in the design of a browser than can protect someone from fraud. So it doesn't really belong in your list of threats for that paper...

Ken

Thanks.... it's in the Internet general threat section, rather than the specific browser section, but you may be right regardless, as it looks out of place. I'll think about that...