Live data from Hacker News

Chrome's experiment of hiding the URL is great for security

jakearchibald.com

11–20 of 211 posts

Re: Chrome's experiment of hiding the URL is great for security

#11
post #8

A native breadcrumbs display might be a great addition to this. I mean, show the domain first, and show a subsection that the website provides, so I can click on that to navigate. If I click on the domain name, provide a standard url input field. Google already does that with search results: http://d.ekin.io/bOdk

That'd be great. But so few URLs are breadcrumbable, in fact, I should fix this on my own site, http://jakearchibald.com/2014/ is a 404.

Re: Chrome's experiment of hiding the URL is great for security

#12
Surprised to see so much attention to this: Isn't it exactly what Safari on iOS does on hundreds of millions of devices worldwide?

EDIT: And given the seeming confusion by some, no, the "article" (if a couple of screenshots and some guy giving an opinion is an "article") is utterly irrelevant to this comment. Noting that it mentions iOS is meaningless. We continually see front-pagers voted up by people who seem blissfully unaware of trends in the industry.

Re: Chrome's experiment of hiding the URL is great for security

#13

As a member of the Chrome security team and one of the original instigators for this experiment, yes the whole point is to prevent phishing. The fact is that phishing is one of the most common attack vectors for most people, and the way the URL is currently displayed does very little to protect them. So, we're experimenting with ways of displaying the essential information (origin and TLS state) as clearly as possibl…

So this came from the same genius who came up with the "checkbox to show all your passwords in clear text without any further safeguards" feature? Man, you're a menace to the web.

Re: Chrome's experiment of hiding the URL is great for security

#14
post #12

Surprised to see so much attention to this: Isn't it exactly what Safari on iOS does on hundreds of millions of devices worldwide? EDIT: And given the seeming confusion by some, no, the "article" (if a couple of screenshots and some guy giving an opinion is an "article") is utterly irrelevant to this comment. Noting that it mentions iOS is meaningless. We continually see front-pagers voted up by people who seem bliss…

Did you even read the article, where that comparison is made explicit?

Re: Chrome's experiment of hiding the URL is great for security

#15
post #8

A native breadcrumbs display might be a great addition to this. I mean, show the domain first, and show a subsection that the website provides, so I can click on that to navigate. If I click on the domain name, provide a standard url input field. Google already does that with search results: http://d.ekin.io/bOdk

That'd be great. But so few URLs are breadcrumbable, in fact, I should fix this on my own site, http://jakearchibald.com/2014/ is a 404.

Using URL itself as a source would not work most of the time I guess, or would require assistance from Google servers.

In any case, I believe breadcrumbs should be parsed from the page html: https://support.google.com/webmasters/answer/185417?hl=en

Re: Chrome's experiment of hiding the URL is great for security

#16
post #10

I just hope it will still be easy to prepend urls, such as when entering reddit.com/s/URL_OF_CURRENT_PAGE

This is an in-development experiment, so its current state is a work in progress. Anything that would ship to users (assuming it even does) would do so in a way that does not damage the general utility of URLs.

Re: Chrome's experiment of hiding the URL is great for security

#17
post #6
post #4

As the article states, this is likely good for the non-tech-savvy people, but what it needs is a button to copy the URL as easily. If the problem is misleading subdomains, would some kind of a detection and a warning be a better solution to the problem?

Did not try it, but apparently if you click on the domain label, it provides a standard url field so you can copy / modify the url.

Also, cmd-l cmd-c works as it always did.

Re: Chrome's experiment of hiding the URL is great for security

#18
I don't get the benefit to cutting off the rest of the protocol handler and path. It may be noisy and not useful to the average user, but it's useful for people who know what they're looking at.

An alternative would be highlight the domain portion of the URL in the appropriate color, ala source code highlighting. This would accomplish both goals nicely.

Re: Chrome's experiment of hiding the URL is great for security

#19
post #18

I don't get the benefit to cutting off the rest of the protocol handler and path. It may be noisy and not useful to the average user, but it's useful for people who know what they're looking at. An alternative would be highlight the domain portion of the URL in the appropriate color, ala source code highlighting. This would accomplish both goals nicely.

View-source & devtools are also useful for people who know what they're looking at. Those things are not shown by default.

Re: Chrome's experiment of hiding the URL is great for security

#20
I think we are confusing the fact that phishing takes place with the purpose of the web.

Even if 80% of the time I was trying to be phished, I'd still want the URL. Why? Because the URL is my ownership of the web. It's my address book. It's what domain owners pay to have. It's the roads that connect one spot to another.

So sure, phishing is a problem. Figure out some way around it that doesn't involve Google locking up the entire internet behind a UI element somewhere. Mobile phones is one thing -- my main browser is another.

I don't doubt there is a problem. I seriously question the ethics of actors that use the existence of a problem as a reason to exert further control over my e-commerce activities. If it looks wrong, even if most people probably don't care, it is wrong. This isn't hard stuff, guys.

I'm also already getting impatient with the seemingly endless parade of folks who are ready to play defense for Google. If Google thinks this is a good idea, let them defend it on their own.

Post reply on HN