Live data from Hacker News

Google adds experimental setting to hide full URLs in Chrome 85 address bar

androidpolice.com

21–30 of 733 posts

Re: Google adds experimental setting to hide full URLs in Chrome 85 address bar

#22
post #4

This might be harmful to github pages where it would hide the repository name. If they include this without offering an option to turn it off, I will quit using Chrome.

Subdomains are part of the URI authority component so they should be shown. It will look like `something.github.io` or whatever.

Re: Google adds experimental setting to hide full URLs in Chrome 85 address bar

#23
post #12
post #5

So Chrome is only showing the domain part now? Just like Safari has been for a long time? Personally I quite like it. From what I understand the main goal is to make phishing attacks more clear to the user, since this is ultimately only a thing the end-user can protect against. Removing the noise definitely helps for that. Having had it like this in Safari for a long time, I must say I greatly prefer this over the ol…

Safari has an option to include the full URL. As a developer, I need the full URL so I turn on the option. If Chrome by some miracle actually goes through with this, I'll try to see if I can get around it (because at the end of the day, everyone uses chrome and chrome dev tools are by far the best).

Other comments are saying there's a flag (chrome://flags) to show the full URL, at least for now.

Re: Google adds experimental setting to hide full URLs in Chrome 85 address bar

#24
post #12
post #5

So Chrome is only showing the domain part now? Just like Safari has been for a long time? Personally I quite like it. From what I understand the main goal is to make phishing attacks more clear to the user, since this is ultimately only a thing the end-user can protect against. Removing the noise definitely helps for that. Having had it like this in Safari for a long time, I must say I greatly prefer this over the ol…

Safari has an option to include the full URL. As a developer, I need the full URL so I turn on the option. If Chrome by some miracle actually goes through with this, I'll try to see if I can get around it (because at the end of the day, everyone uses chrome and chrome dev tools are by far the best).

> chrome dev tools are by far the best

How are they better than those in Firefox? It looks like you did a thorough analysis.

Re: Google adds experimental setting to hide full URLs in Chrome 85 address bar

#26

A couple of Google Chrome devs talk about the issues surrounding the readability of urls and their security implications and possible solutions in an episode of their podcast[0]. I think they make a compelling argument for hiding most of the url in part to prevent phishing however I do think they should allow this behaviour to be toggled via a flag. [0] https://youtu.be/0-wB1VY3Nrc

Do you know if this information is somewhere more accessible than a 20 minute video?

Hiding the https and www is already frustrating enough, and this change would make Chrome barely usable for my purposes.

Re: Google adds experimental setting to hide full URLs in Chrome 85 address bar

#27
Isn't this a good example of "feature creep"? I dont see any reason why it makes a browser more useful when the URL is partially hidden.

It reminds me of a company which developed a product which was more or less done. So the SWE manager and the product manager made up new (pretty useless) features just to tell their bosses the devs are busy and the team must stay intact.

Re: Google adds experimental setting to hide full URLs in Chrome 85 address bar

#28
post #4

This might be harmful to github pages where it would hide the repository name. If they include this without offering an option to turn it off, I will quit using Chrome.

Subdomains are part of the URI authority component so they should be shown. It will look like `something.github.io` or whatever.

www is dropped from the url, so I don't believe that's the case

Re: Google adds experimental setting to hide full URLs in Chrome 85 address bar

#29
post #2

Can see this being exploited in some fashion for phishing attacks..

Shouldn't it actually help , seeing as the domain name is the important part? Now users can't get tricked into interpreting the path as part of the domain name.

Even if it does help in some cases, it's hiding the path, which in itself could cause other vectors of attacks. Just host malicious pages on legit sites where you can host and phish for clicks to it, faking the home page look and feel.
Post reply on HN