News for hackers. Stuff that matters.

A comment on “We plan to hide ‘https’ scheme and subdomain ‘www’ in Chrome omnibox in M76”. Parent comment

Re:“We plan to hide ‘https’ scheme and subdomain ‘www’ in Ch... by cheeze on Wednesday July 31, 2019 @08:52AM (#20573987)
Which worked really well with https://stripe.ian.sh/

Granted, they revoked his cert after he published, but it goes to show how easy it would be to fake an EV cert and have safari users have no idea.

[ Parent | on HN ]
Re:“We plan to hide ‘https’ scheme and subdomain ‘www’ in Ch... by Ajedi32 on Wednesday July 31, 2019 @09:12AM (#20574133)
That's a different thing entirely. Google, as far as I know, has no plans to hide the domain entirely and only show information from EV certs.
[ Parent | on HN ]
Re:“We plan to hide ‘https’ scheme and subdomain ‘www’ in Ch... by cheeze on Thursday August 01, 2019 @05:00PM (#20588316)
Yes. I agree with your characterization here.

I'm just blown away that Apple hasn't reverted this. Imo it's a huge vuln.

[ Parent | on HN ]