> Seriously speaking: If browsers are simplifying the URI scheme for the alleged benefit of users, how do we expect these users to know anything about addresses

> Seriously speaking: If browsers are simplifying the URI scheme for the alleged benefit of users, how do we expect these users to know anything about addresses? This has always driven me bonkers about the ProofPoint URL-obfuscation 'security'. My work started enforcing this recently, and it drives me crazy: 1. rather than training you to think more carefully about links in e-mails, it trains you to click blindly, because the software says it's safe; 2. it obscures the target of the URL, so that a URL that even a novice would recognise as fishy becomes a garbled string like any other—here's an example (but safe) mangled URL: https://urldefense.proofpoint.com/v2/url?u=https-3A__escholarship.org_content_qt5dj9b74w_qt5dj9b74w.pdf&d=DwIC-g&c=7Q-FWLBTAxn3T_E3HWrzGYJrC4RvUoWDrzTlitGRH_A&r=fDFfg5N-sxMSxbW3hS6WsQ&m=giTLUqirmM6FZGAOLKIp-AHow2YDDWYuGHGz6jjxykY&s=FhP_G8aKAp6QmXR9rR0Pl8L5Z5_XlDPql2uQqmKhDxM&e= 3. it filters outgoing links, meaning it assumes that the university employees, not just outside spammers, are hostile (but maybe this is a reasonable assumption?).