4 ms·

Isn't this a security risk? What if someone malicious takes control of the www.com domain?

• speleding 8y ago
  The www.com might not be easy to get, but there is probably a www name at another important TLD that can be purchased. And if you own that domain you can easily get SSL certificates too. Sounds like Chrome could now be a phisher's best friend…
  • qu4z-2 8y ago
    It appears that it only does it for anything subdomainish -- that is, not the first part after the TLD. I tested it against .nz which has a silly mix of .{co,govt,school}.nz second-level domains and directly registered example.nz domains and it always displays at least one "registered" bit. Which is almost worse because it seems like people have put thought into this.
• larkeith 8y ago
  This entire change is a security risk - there is no guarantee that any subdomain has the same owner as the primary, and that's not even getting into subdomain hijacking.
  • thaumasiotes 8y ago
    Let's get into subdomain hijacking a bit. Imagine taking control of www.www.www.google.com .