News for hackers. Stuff that matters.

A comment on Google resumes its attack on the URL bar, hides full addresses on Chrome 86. Parent comment

Re:Google resumes its attack on the URL bar, hides full addr... by UncleMeat on Friday August 14, 2020 @01:56PM (#24161042)
What if I want more information? I want to know what TLS version both parties negotiated. I want to know who signed the cert and when it expires. Etc. etc.

The point is that "the UI should express everything a power user could ever want to know about some security-adjacent property" is not the status-quo and people should not act like it is. Dropping to just domains is like shifting from a big blob of text including a ton of request information to just the lock icon. It distills it to something that covers basically all the information you'd ever actually need and is comprehensible to typical users.

[ Parent | on HN ]
Re:Google resumes its attack on the URL bar, hides full addr... by toast0 on Friday August 14, 2020 @02:29PM (#24161488)
I mean, I was upset when Google moved the certificate details from just click on the lock to click on the lock and go into developer tools and do some other bs I've forgotten since I'm no longer working where I need to confirm certificates. However, I figured that the number of people checking certificates was very small, so trying to use our weight to change Google's mind was fruitless. Fighting against hiding the URL seems a lot more tractable --- although, I just took it as a sign that Google doesn't want me to use their browsers, so I stopped.
[ Parent | on HN ]