News for hackers. Stuff that matters.
Re:Chrome 69: “www.” subdomain missing from URL by slenk on Thursday September 06, 2018 @05:28PM (#17929714)
Two prominent examples noted in the bug: https://citibank.com.sg and https://www.citibank.com.sg are different, http://www.pool.ntp.org and http://pool.ntp.org are different.

Like, big companies run separate servers on the two domains.

That's besides the fact where if you have www.example.www.example.com, it rewrites to example.example.com.

Re:Chrome 69: “www.” subdomain missing from URL by DougBTX on Thursday September 06, 2018 @05:33PM (#17929754)
The first citibank url doesn’t load for me, so it is site vs not site rather than two different sites, and both those ntp urls are redirecting me to https://www.ntppool.org/en/ - perhaps there’s less substance than meets the eye to those complaints.
Re:Chrome 69: “www.” subdomain missing from URL by yladiz on Thursday September 06, 2018 @05:53PM (#17929943)
No, actually, there's a really good complaint here -- if you're hiding "www", then the two Citibank URLs look the same when they are actually not in Chrome, and the user will be confused when typing in the URL that they've visited many times before and not actually being able to visit it because now Chrome obfuscates the "www" part.
Re:Chrome 69: “www.” subdomain missing from URL by hrez on Thursday September 06, 2018 @05:49PM (#17929886)
user1 - https://citibank.com.sg doesn't work for me

user2 - it's fine, here is a screenshot of it working (while showing "beautified" https://www.citibank.com.sg)

how is that not confusing?

Re:Chrome 69: “www.” subdomain missing from URL by wingworks on Thursday September 06, 2018 @06:10PM (#17930075)
I think it's more on the website owners to fix their sites, users expect domain.com to be the same/auto-redirected to www.domain.com or vice versa. I think it's a good thing what Chrome is doing, it will push website owners to correctly set up their domain redirects and in the end, lessen end-user confusion.
Re:Chrome 69: “www.” subdomain missing from URL by DougBTX on Thursday September 20, 2018 @10:01AM (#18032492)
Coming back to this a couple of weeks later, they appear to have changed their site, and https://citibank.com.sg now redirects to https://www.citibank.com.sg/
Re:Chrome 69: “www.” subdomain missing from URL by jake_the_third on Thursday September 06, 2018 @06:25PM (#17930177)
No, users expect to type what they see in the address bar, and get the same result every time.

Can we even call them address bars anymore?

And blaming website owners for working within the bounds of published standards is ridiculous and you know it.

Re:Chrome 69: “www.” subdomain missing from URL by justadudeama on Thursday September 06, 2018 @06:51PM (#17930320)
If I asked any non-technical person under the age of 20 the difference between www.google.com and google.com they probably couldn't tell me. Users expect www.example.com to equal example.com. If a website isn't redirecting one to the other, they, are doing something that is incredibly anti-user and it is a good thing that google/apple are forcing them to do it different.
Re:Chrome 69: “www.” subdomain missing from URL by jake_the_third on Thursday September 06, 2018 @10:16PM (#17931415)
This is not about users knowing the difference between www and no www on a site that redirects one to the other, but about users who don't know the difference on a site that doesn't. See my comment https://news.ycombinator.com/item?id=17930243 for an illustration of one of the issues that may occur.

> Users expect www.example.com to equal example.com.

No, they don't. The expect that the address they write down works when they type it back in the address bar though.

> If a website isn't redirecting one to the other, they, are doing something that is incredibly anti-user and it is a good thing that google/apple are forcing them to do it different.

You keep claiming this with any sort of evidence or backing. This may be anecdotal, but I worked as tech support for a large org (300+ users) most of my career and have dealt with most types of users. I've only seen them interact with the address bar in one of two ways: explorer shortcuts on the desktop/browser bookmarks (few) or stick-it notes on the monitor or keyboard (many). I'd be willing to bet my next paycheck that not 5% of them are aware that google redirects to www.

At least for those users, none of them will benefit from chrome's mishandling of www. Many of them will suffer from it. I'd be willing to stand corrected with a proper study though.

Also, subdomains aren't only used to make http urls pretty, they are intended to be used to refer to actual physical hardware hosts that belong to a given domain. All published standards I know of are written with this in mind. None of them mandate that www be synonymous to the parent domain, not even those responsible for web technologies. Organizations that follow standards are not at fault for following standards.

If having two different hosts on www and the parent domain was truly "incredibly anti-user" (a dubious claim), let google introduce a rfc at relevant standards bodies and have it go through proper scrutiny first.

Re:Chrome 69: “www.” subdomain missing from URL by Jedd on Thursday September 06, 2018 @08:28PM (#17930923)
> If I asked any non-technical person under the age of 20 ...

Which is why technical specifications aren't written or maintained by non-technical people.

Re:Chrome 69: “www.” subdomain missing from URL by NathanCH on Thursday September 06, 2018 @07:00PM (#17930369)
I think this is a fair comment but Chrome has been doing this a lot lately. They'll make a change and developers must scramble to fix their websites.

It's the same with autocomplete earlier this year. One day Google decides to ignore autocomplete="off" and all hell breaks lose.

Interesting to note, they have reverted this change. Google now respects autocomplete="off" in some scenarios (i.e. when autofill is not triggered via name attribute).

Note: autocomplete !== autofill

Re:Chrome 69: “www.” subdomain missing from URL by abalone on Thursday September 06, 2018 @07:11PM (#17930441)
If this is the worst example anyone can come up with, debugging a misconfigured site while relying exclusively on screenshots of beautified URLs, then I think it proves my point.

There will always be tradeoffs in advancing usability. This is objectively a small one. The problem is the unstated lack of appreciation for the value of usability improvements, because it's usually a more technically sophisticated person criticizing it who's comfortable with the way things have been. If you care about usability, that is an immensely net positive gain.

Re:Chrome 69: “www.” subdomain missing from URL by tazard on Thursday September 06, 2018 @07:45PM (#17930645)
How is having to "just know" that you have to type www to get that page to load, despite it being presented without www a step forward for usability for technically unsophisticated people? It just seems confusing to me. I get that it looks "cleaner" but I am having a hard time figuring out how it makes anyone's life easier, or how it actually makes the web more usable.
Re:Chrome 69: “www.” subdomain missing from URL by jsjohnst on Thursday September 06, 2018 @08:10PM (#17930797)
Re:Chrome 69: “www.” subdomain missing from URL by jsjohnst on Thursday September 06, 2018 @08:08PM (#17930788)
Also noted in the bug:

m.tumblr.com IS NOT a mobile variant of tumblr.com

I kinda wished I had that blog now so I could put a proof of concept up to show why this is a very bad idea from a phishing perspective.

Re:Chrome 69: “www.” subdomain missing from URL by TheKarateKid on Thursday September 06, 2018 @05:42PM (#17929837)
Just because a major bank and government organization use an unusual domain configuration, it doesn't mean that it is good practice.
Re:Chrome 69: “www.” subdomain missing from URL by tazard on Thursday September 06, 2018 @07:58PM (#17930729)
And just because it's not a good practice doesn't mean that making both www and non www version look the same to the user and having it "just randomly not load" is a step forward for usability.
Re:Chrome 69: “www.” subdomain missing from URL by joan_lm on Thursday September 06, 2018 @07:59PM (#17930741)
but showing an incorrect url is a bad practice
Re:Chrome 69: “www.” subdomain missing from URL by ender7 on Thursday September 06, 2018 @05:51PM (#17929912)
So citibank and NTP will need to change their domain structure. That's okay: those are confusing structures.

This is a tradeoff -- continuing to support already-confusing differences is not worth the loss of the ease-of-use gain referenced in the grandparent.

Re:Chrome 69: “www.” subdomain missing from URL by LocalH on Thursday September 06, 2018 @05:56PM (#17929965)
It seems like the Internet is moving more to a "centralized" design where certain actors have decided "well, here's how we're going to do things now, deal with it".

The golden age of the Internet is already dead, guys. We're unfortunately over the hump.

Re:Chrome 69: “www.” subdomain missing from URL by zipotm on Thursday September 06, 2018 @06:18PM (#17930131)
EXACTLY!