Live data from Hacker News

Chrome 69: “www.” subdomain missing from URL

bugs.chromium.org

61–70 of 919 posts

Re: Chrome 69: “www.” subdomain missing from URL

#61
post #12

Yo, this is... going too far, c'mon now. While sure, www seems odd now, it's still a subdomain and we're inching into territory of obscuring things that matter for small gains in end-user perception that aren't _that_ impactful.

Why does www matter?

Re: Chrome 69: “www.” subdomain missing from URL

#62
Just updated to see it in action. Seems like a nice improvement for end users. Don't think there is any reason not to do this, other than a nostalgic desire for things to stay the same. Most sites already have a www. to . redirect in place and if you don't its a trivial change.

Re: Chrome 69: “www.” subdomain missing from URL

#63
post #47

Since everyone is wondering why, and since I happened to stumble across a reason during my time as a pentester, here you go: Spearphishing is still one of the most common ways of breaching a corporate network. If I target you, you will likely fall for one of my attempts. If you are a company rather than a person, my odds go way up, because I have N chances to trick someone rather than 1 (where N is roughly the number…

As true as this is, hiding the "www." subdomain isn't the right solution.

For starters, it doesn't work for non "www." subdomains, for example... news.ycombinator.com isn't protected by this solution.

A better solution IMHO, would be to do it like firefox, grey it out.

Re: Chrome 69: “www.” subdomain missing from URL

#64
post #47

Since everyone is wondering why, and since I happened to stumble across a reason during my time as a pentester, here you go: Spearphishing is still one of the most common ways of breaching a corporate network. If I target you, you will likely fall for one of my attempts. If you are a company rather than a person, my odds go way up, because I have N chances to trick someone rather than 1 (where N is roughly the number…

Of the reasons I'd buy for Google being incentivised to do this, preventing spearphishing would be low on the list.

Re: Chrome 69: “www.” subdomain missing from URL

#65
post #47

Since everyone is wondering why, and since I happened to stumble across a reason during my time as a pentester, here you go: Spearphishing is still one of the most common ways of breaching a corporate network. If I target you, you will likely fall for one of my attempts. If you are a company rather than a person, my odds go way up, because I have N chances to trick someone rather than 1 (where N is roughly the number…

[deleted]

Re: Chrome 69: “www.” subdomain missing from URL

#67
post #64
post #47

Since everyone is wondering why, and since I happened to stumble across a reason during my time as a pentester, here you go: Spearphishing is still one of the most common ways of breaching a corporate network. If I target you, you will likely fall for one of my attempts. If you are a company rather than a person, my odds go way up, because I have N chances to trick someone rather than 1 (where N is roughly the number…

Of the reasons I'd buy for Google being incentivised to do this, preventing spearphishing would be low on the list.

Then you haven’t been paying attention.

Re: Chrome 69: “www.” subdomain missing from URL

#68
post #47

Since everyone is wondering why, and since I happened to stumble across a reason during my time as a pentester, here you go: Spearphishing is still one of the most common ways of breaching a corporate network. If I target you, you will likely fall for one of my attempts. If you are a company rather than a person, my odds go way up, because I have N chances to trick someone rather than 1 (where N is roughly the number…

Funny that you mention that, i never noticed, but firefox displays "ycombinator.com" in the URL "https://news.ycombinator.com/" in black, while other parts you are talking about are light gray. Seems more reasonable then hiding parts.

Re: Chrome 69: “www.” subdomain missing from URL

#69
post #3

The fix is to change your subdomain from "www" to "amp". You can read more about it at the IETF website located here: https://www.ampproject.org/ Please submit any complaints you have as a video on YouTube.

Sorry i don't trust URLs from strangers, can you tell me the google search i need to do for this?

Re: Chrome 69: “www.” subdomain missing from URL

#70
This seems fine.

I'm assuming you can always click to expand and show the full URL.

For a lot of people (devs especially) it would be nice to be able to change an option to see the whole URL at a glance, but for most people it's just a confusing mess they have to look through for the domain name.

Post reply on HN