3 ms·

google.com.evilwebsite.example?=google.com Oh that has google in it (twice even) we can go there. There's also arguments that URLs are too complex for normal

google.com.evilwebsite.example?=google.com Oh that has google in it (twice even) we can go there. There's also arguments that URLs are too complex for normal people to understand. I agree with you though, hiding or redirecting URLs is the opposite of protecting users from phishing.

pdkl95 6y ago
> google.com.evilwebsite.example?=google.com This was solved a decade ago by rendering the 2nd+1st level domains (and sometimes other parts of the URL) in a different style. > There's also arguments that URLs are too complex for normal people to understand. That argument is an insulting attempt to justify a form of illiteracy[1]. Most people don't need to know all of the technical features of a URL; they just need to be able to use it as an address and recognize basic features like the hostname. Street addresses are a good analogy. Most people understand the basics easily even though physical addresses are far more complex[2] than URLs! [1] https://news.ycombinator.com/item?id=7694919 https://news.ycombinator.com/item?id=7694919 [2] https://news.ycombinator.com/item?id=7695735 https://news.ycombinator.com/item?id=7695735