They're just trying to prevent phishing. Remember when the DNC was hacked? Employees at the DNC were linked to sites that looked exactly like the Google sign-i

They're just trying to prevent phishing. Remember when the DNC was hacked? Employees at the DNC were linked to sites that looked exactly like the Google sign-in page, except that the URL was "myaccount.google.com-securitysettingpage.tk". picture of the phishing website: https://security.stackexchange.com/questions/189688/does-google-check-for-unicode-characters-to-determine-spam-now-in-gmail https://security.stackexchange.com/questions/189688/does-goo... From interviews, it seems like there's two features Chrome developers are working on try to prevent these kinds of attacks. One is to hide the subdomain so that people can't make such tricky looking URLs. Another is feature to identify lookalike URLs and let users know about the anomaly. sources: https://www.nytimes.com/interactive/2017/01/06/us/russian-hack-evidence.html https://www.nytimes.com/interactive/2017/01/06/us/russian-ha... https://p3isys.com/p3isys-tech-blog/153-podestahack https://p3isys.com/p3isys-tech-blog/153-podestahack https://www.wired.com/story/google-chrome-kill-url-first-steps/ https://www.wired.com/story/google-chrome-kill-url-first-ste...