The recent increase in the number of phishing attacks goes to show that the current Secure Socket Layer (SSL) is insufficient to protect users against fraudulent websites. In this paper, we will discuss some of the current phishing attacks and the limitations/weaknesses of the current SSL protocol. Next, we propose an ID-based SSL protocol to overcome the limitations/weaknesses of current SSL and offer better protection for users against phishing attacks. We show in the security analysis how our protocol prevent phishing attacks that are difficult to detect, even for experienced and well-educated users.