Comment

Comment by onion2k

Telling people to look for https:// as a way to indicate that they're secure isn't good enough. There's nothing stopping a malicious party applying an SSL certificate to www.paypal.random-name.com. Browsers need to inform users based on actual information that they have (eg the SSL cert, reports of malicious domains, etc) and display that to the user.

Essentially Google know more about the state of a website than a user can learn from the domain alone, and they should display that to the user. Once that's happening the various parts of the domain are less important. The downside of this is that it increases Chrome users reliance on Google.

parent onion2k 7 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton