News for hackers. Stuff that matters.
Re:“We plan to hide ‘https’ scheme and subdomain ‘www’ in Ch... by UncleMeat on Wednesday July 31, 2019 @05:49PM (#20578919)
> Seriously speaking: If browsers are simplifying the URI scheme for the alleged benefit of users, how do we expect these users to know anything about addresses? Isn't this rather undermining security than enhancing it?

Users already don't know anything about addresses. Even security professionals botch the "look at some visual indicator of connection security" all the time (see SSLStrip). As a security feature the URL bar is almost entirely useless for the huge majority of users.

URL bars also don't really tell you where your content is coming from. Iframes don't have URL bars. All that javascript downloaded from somewhere when the page loaded doesn't have a URL bar. The web isn't made of uniquely identifiable documents anymore.

There are no comments on this comment yet.