domains Google is testing domain-only URLs in Chrome to help foil scams and phishing

[equity78]

Domain names and URLs are one of of the most basic forms of web security we have, letting us quickly know where we are online. Sometimes, though, they can be used to mislead. Hackers and scammers often create fake websites that look plausible by using URLs with typos (twittter.com) unfamiliar subdomains (yourbank.sign-in.info) or hyphenated domains (secure-gmail.com). Unsuspecting users then visit these URLs thinking they belong to legitimate companies before being tricked into giving away their credentials.

https://www.theverge.com/2020/8/13/...omain-name-only-url-experiment-scams-hacks-86

 

[CraigD]

IMO half the issues are about subdomains confusing people.

If they can block subdomains from showing in the browser address bar, that would be more effective - although naturally I still want the option of seeing them if I choose.

 

[Shawn T]

I personally (and perhaps uneducatedly) think this is a good move towards reducing phishing attacks with misleading and ambiguous domain URLs. It's extremely common these days.

 

[uzver]

What are the news? It’s been like this in Safari for ages.

 

[CraigD]

IMO half the issues are about subdomains confusing people. If they can block subdomains from showing in the browser address bar, that would be more effective - although naturally I still want the option of seeing them if I choose.

The GIF in the article confused me because it was still showing the subdomain for the Wikipedia example both before and after.

I've been thinking that all they really need to do is highlight the domain name so it is distinct from the full URL string including subdomain.

I think some other browsers or addons/scripts may already do something similar?

 

[equity78]

The GIF in the article confused me because it was still showing the subdomain for the Wikipedia example both before and after.

I've been thinking that all they really need to do is highlight the domain name so it is distinct from the full URL string including subdomain.

I think some other browsers or addons/scripts may already do something similar?

Good point.