Re:Chrome 69: “www.” subdomain missing from URL
by zbentley on Thursday September 06, 2018 @06:12PM
(#17930086)
If true, that's seriously concerning from a "detecting visual-similarity domain hijacking" security perspective.
Re:Chrome 69: “www.” subdomain missing from URL
by abalone on Thursday September 06, 2018 @06:39PM
(#17930253)
FWIW the Chromium agrees that 2 and 3 are bugs and will fix them.[1]
1 is by design though. Remember that they are only partially hidden; when you focus on the address bar it reveals the true address.
[1] https://bugs.chromium.org/p/chromium/issues/detail?id=881410...
1. "m.tumblr.com " and "tumblr.com " are BOTH displayed as "tumblr.com" even though they're literally different sites.
2. "www.example.www.example.com" displays as "example.example.com" which means all "www" subdomains, whether leading or not are being stripped out.
3. In the extreme case, "www.m.www.m.example.com" shows up as "example.com" which is pretty misleading.
Usually, the Chrome team is very thoughtful about decisions that impact security. I'm surprised this was released in such a half-baked state. I hope this is not an indication of how Google's plan to "kill the URL" will work out.