Google adds experimental setting to hide full URLs in Chrome 85 address bar

Re:Google adds experimental setting to hide full URLs in Chr... by gspr on Sunday June 14, 2020 @05:41AM (#23516320)

Next step: an "education campaign" to tell people that that part of the web is "insecure". In fact you should only get any content from a handful of domains. And in non-net-neutrality jurisdictions, the ISPs will start offering packages that work with pre-approved domains only. And since it'll be enough for 90% people, it'll work.

I hope I'm just being alarmist.

[ Parent | on HN ]

Re:Google adds experimental setting to hide full URLs in Chr... by vladvasiliu on Sunday June 14, 2020 @06:32AM (#23516571)

This already kind of happens in Firefox. If you have a non public certificate authority, when you visit a site signed by that CA it says that it's not verified by an authority known to Firefox.

I don't know if there is a way to "bless" such an authority once it's added to the trust store.

[ Parent | on HN ]

Re:Google adds experimental setting to hide full URLs in Chr... by toyg on Sunday June 14, 2020 @06:50AM (#23516673)

? If it’s added to the trust store, it should be blessed. Note that this is the FF store, not the Windows one.

[ Parent | on HN ]

Re:Google adds experimental setting to hide full URLs in Chr... by extra88 on Sunday June 14, 2020 @07:01AM (#23516737)

What browser doesn’t warn you about sites signed by a CA not in their list of CAs?

[ Parent | on HN ]

Re:Google adds experimental setting to hide full URLs in Chr... by vladvasiliu on Sunday June 14, 2020 @07:11AM (#23516788)

I specifically said "once it's added to the trust store". It is known to the browser.

When I wrote the message I wasn't in front of Firefox, now I am. So to summarize:

* The CA's certificate is added to the Firefox store and trusted.

* Visiting a site gets the lock in the address bar.

* Clicking on the lock in bar shows "Connection secure. Connection is verified by a certificate issuer that is not recognized by Mozilla"

Screenshot: https://imgur.com/a/T4rznXK

[ Parent | on HN ]

Re:Google adds experimental setting to hide full URLs in Chr... by extra88 on Sunday June 14, 2020 @11:05AM (#23518177)

So what’s the problem? Mozilla didn’t add the CA to the trust store, you did, that’s why Mozilla doesn’t recognize it. It doesn’t sound like it interferes with normal operation and differentiating bundled and added CAs on inspection sounds like a good idea.

[ Parent | on HN ]

Re:Google adds experimental setting to hide full URLs in Chr... by gspr on Sunday June 14, 2020 @07:24AM (#23516856)

This is a completely different matter.

[ Parent | on HN ]