Live data from Hacker News

Chrome 69: “www.” subdomain missing from URL

bugs.chromium.org

51–60 of 919 posts

Re: Chrome 69: “www.” subdomain missing from URL

#52
To be clear, the "www" is only missing from the URL that is displayed in the address bar, while the browser is still attempting to resolve and fetch the URL with the "www." So instead of something that would completely break many websites, this is just something that is as confusing as hell for no good reason.

When a website requires "www" to resolve and respond, who in their right mind would want it hidden in the displayed URL?

Re: Chrome 69: “www.” subdomain missing from URL

#53

If the browser uses some technique to detect that www.domain.com is functionally identical to domain.com for a given domain, then I don't see a serious problem with this. But if they are short of that certainty, they're obscuring a critical part of the URL, and harming usability (e.g., if I want to jot down a site's URL for later use, I might get something unexpected).

Funny enough, I visited a site for some task or other just yesterday for which I just typed the base domain, and got ... nothing. It still required the "www." prefix -- no redirect, "ANAME" DNS-side hacks, VIPs or anything in place to make the base domain a reachable URL. This new Chrome change, if it's truly doing naive subdomain hiding, would be a really bad UX for sites like that.

Re: Chrome 69: “www.” subdomain missing from URL

#54
Why does this matter? Users don't care and its easier to remember/understand that all websites are just "x.com" rather than sometimes being "www.x.com". If you have some server/troubleshooting/network/dev problem with it, the missing info should be moved to developer tools.

This is just removing data that is useless and confusing to 99.9% of users - whats the problem?

Re: Chrome 69: “www.” subdomain missing from URL

#55
This is only visually what's displayed in the address bar, similar to how they started dropping http/https from the start of URLs a while back.

While I'd personally disagree with these kind of changes, and I would always prefer it to show the http/https and the www dot, it doesn't actually break things like copy and pasting the URL from the address bar. You still go to www.google.com when you type in www.google.com, it's just trimming away the www dot displayed in the address bar.

I think for the vast majority of non-technical people it's not really going to make even a little bit of difference. If anything it'll make it easier to spot what domain they're on, assuming they're even checking to begin with.

Re: Chrome 69: “www.” subdomain missing from URL

#56
post #47

Since everyone is wondering why, and since I happened to stumble across a reason during my time as a pentester, here you go: Spearphishing is still one of the most common ways of breaching a corporate network. If I target you, you will likely fall for one of my attempts. If you are a company rather than a person, my odds go way up, because I have N chances to trick someone rather than 1 (where N is roughly the number…

Firefox fixed this by highlighting the "ycombinator.com" portion of the URL. Zero need to hide the rest from the user

Re: Chrome 69: “www.” subdomain missing from URL

#57
post #10

Is this really a big deal? Don't many websites either redirect the www to the non-www, or the other way around?

It's about the principle. www is a valid subdomain. Browsers are supposed to be as unopinionated as possible since they are browsers , not mediators, and their job is to implement the standards of the web.

You want your browser to show unlimited popup windows too?

Re: Chrome 69: “www.” subdomain missing from URL

#58
post #47

Since everyone is wondering why, and since I happened to stumble across a reason during my time as a pentester, here you go: Spearphishing is still one of the most common ways of breaching a corporate network. If I target you, you will likely fall for one of my attempts. If you are a company rather than a person, my odds go way up, because I have N chances to trick someone rather than 1 (where N is roughly the number…

Wasn't this (partially?) solved by making the domain black and the rest of the text gray? That's how it appears in Firefox. It makes it very easy to see "ycombinator.com".

Re: Chrome 69: “www.” subdomain missing from URL

#59
post #49
post #30

This is idiotic and harmful. We already lost information about the protocol, because somebody believed it is "too complex" for users. Now we're losing other parts of the URL. It's making a joke of the SSL/TLS padlock, too — what exactly is the padlock supposed to tell me? It used to signify that a "known authority" certified that I'm connected to whatever I see in the URL bar. But now that browsers take liberties wit…

Given the adoption rate of SSL, I imagine the padlock itself will become useless even without Chrome's changes. Does it mean anything if almost every website has it?

ideally it means no passive snooping

Re: Chrome 69: “www.” subdomain missing from URL

#60
post #30

This is idiotic and harmful. We already lost information about the protocol, because somebody believed it is "too complex" for users. Now we're losing other parts of the URL. It's making a joke of the SSL/TLS padlock, too — what exactly is the padlock supposed to tell me? It used to signify that a "known authority" certified that I'm connected to whatever I see in the URL bar. But now that browsers take liberties wit…

99.9% of users have no idea what any of the words you just said mean. The change was made for them, not for you (the .1%)
Post reply on HN