And as I said in my original comment, you can't rely on user education. If we've learned anything about the psychology of phishing, it's that.