News for hackers. Stuff that matters.

A comment on “We plan to hide ‘https’ scheme and subdomain ‘www’ in Chrome omnibox in M76”. Parent comment

Re:“We plan to hide ‘https’ scheme and subdomain ‘www’ in Ch... by chii on Wednesday July 31, 2019 @08:57AM (#20574020)
> open API standard that companies could use to provide independent information about domains ... anyone could set up as a source of information about whether or not a domain is trustworthy.

and how is a user supposed to know who to trust for this information, if there are multiple sources?

At the root, the problem is one of verification - that who you are communicating with is who they claim to be. At some level, there needs to be trust in one entity as a definitive source (that the site you're looking at is indeed created by the business that the site is claiming to be representing). There has to be some level of trust somewhere...

[ Parent | on HN ]
Re:“We plan to hide ‘https’ scheme and subdomain ‘www’ in Ch... by onion2k on Wednesday July 31, 2019 @10:03AM (#20574492)
and how is a user supposed to know who to trust for this information, if there are multiple sources?

They could choose the provider they trust most. Which, for the majority, would probably be Google.

[ Parent | on HN ]