2 ms·
How exactly does it help to prevent fishing from domains like my-google-account.tk?
by _ink_ 6y ago
How exactly does it help to prevent fishing from domains like my-google-account.tk?
- kats 6y agoIf they hide the subdomain, then if users see google.com at the start of the URL it will actually be google.com. Tricky URLs like "myaccount.google.com-securitysettingpage.tk" would get displayed as "com-securitysettingpage.tk" instead.
- jkrems 6y ago(Disclaimer: Work at Google but not affiliated with our security team or with Chrome.) Those URLs have to actually contain the name of the brand in the thing that is being registered with the domain registrar. Which is a _lot_ easier to find and proactively shut down than things in subdomains which may only be visible once a specific URL gets resolved (wildcards etc.).