Live data from Hacker News

Google resumes its attack on the URL bar, hides full addresses on Chrome 86

androidpolice.com

21–30 of 497 posts

Re: Google resumes its attack on the URL bar, hides full addresses on Chrome 86

#21
post #2

I get emails from some banks with instructions to spot phishing. One of those is to look at the full URL in emails or on websites to know if it’s authentic or not. For better or worse, the URL scheme is what we have to identify websites and pages. Hiding that on larger screens doesn’t make much sense. It also hinders learning for the next generation.

The bank may say that, but it's not actually good or practical advice.

Re: Google resumes its attack on the URL bar, hides full addresses on Chrome 86

#23
post #8
post #3

Earlier quoted context omitted.

Actually, that's their argument for doing it. Most users don't understand the different bits of a URL, to know whether it's from the site they think it's from. See (huge) previous discussion from two months ago: https://news.ycombinator.com/item?id=23516088 Personally, for my own purposes, I think hiding any bit of the URL is incredibly inconvenient. Already hiding the www. is seriously annoying. I will switch this n…

If that's really their justification, then I wish they would take the approach that Firefox does - show the full URL but have the domain name in white and the rest of the URL in a muted color. It provides the full information as well as highlighting the most important info for spotting a phishing scheme.

> show the full URL but have the domain name in white and the rest of the URL in a muted color

Which is exactly what they do at the moment.

Re: Google resumes its attack on the URL bar, hides full addresses on Chrome 86

#24

> “Showing the full URL may detract from the parts of the URL that are more important to making a security decision on a webpage," Chromium software engineer Livvie Lin said in a design document earlier this year. I’m a software engineer, too, but I would never make such an important UX decision because I know that is not my area of expertise. I hope they’ve gotten significant user feedback on this before rolling it…

It's Nanny State rationale at best, or cynical condescension -- I hate it, too. I switched from chrome back to firefox a year ago, with no loss of anything.

Re: Google resumes its attack on the URL bar, hides full addresses on Chrome 86

#25
post #3

Earlier quoted context omitted.

Actually, that's their argument for doing it. Most users don't understand the different bits of a URL, to know whether it's from the site they think it's from. See (huge) previous discussion from two months ago: https://news.ycombinator.com/item?id=23516088 Personally, for my own purposes, I think hiding any bit of the URL is incredibly inconvenient. Already hiding the www. is seriously annoying. I will switch this n…

It is not just inconvenient, hiding or modifying URLs is a lie and is a security problem. Hiding part of the URL means that you don't really see what's going on, and that is the first step towards a security problem, not away from it.

I agree. But I'm afraid Google's solution is going to be along the lines of showing a green mark for anything served from their own servers, with the subtle implication that anything else is less trustworthy.

Re: Google resumes its attack on the URL bar, hides full addresses on Chrome 86

#26
post #9

Sigh. Now browsers are as powerful as OSes. Why do you need OSes? Address bars? People don't need them. Google should tell you which website you're visiting is good or which is bad if they hide the address bar.

I’m not sure why this is being downvoted, this is an accurate albeit sardonic description of what’s happening.

People don’t want to visit AMP sites, they want to visit the site that’s the original source for their news, etc...

Re: Google resumes its attack on the URL bar, hides full addresses on Chrome 86

#28
post #23
post #8

Earlier quoted context omitted.

If that's really their justification, then I wish they would take the approach that Firefox does - show the full URL but have the domain name in white and the rest of the URL in a muted color. It provides the full information as well as highlighting the most important info for spotting a phishing scheme.

> show the full URL but have the domain name in white and the rest of the URL in a muted color Which is exactly what they do at the moment.

wow I've never noticed this. it's pretty subtle.

Re: Google resumes its attack on the URL bar, hides full addresses on Chrome 86

#29
I still haven't found a good answer why they do this. "Makes it harder to tell if the current site is legitimate" sounds like an excuse. If you are the perfect target for a phishing attack (= clicks on everything, enters passwords everywhere, has no clue about host names) then you also won't be able to understand what Chrome presents you in the address bar after obfuscation.

My best explanation so far is that the Chrome team doesn't know how to improve their browser anymore so they just make up work to keep the software engineers busy.

Post reply on HN