This is a cool idea. The host name in the URL goes a long way. But there's still some trickery that could be used with redirection, e.g. "I'm Feeling Lucky" Go

This is a cool idea. The host name in the URL goes a long way. But there's still some trickery that could be used with redirection, e.g. "I'm Feeling Lucky" Google URLs and the like. Also most malicious URLs will include the payload in the request parameters. You can still do a lot of damage with a GET request. (Ask Goolge bot if you don't believe me http://blogs.securiteam.com/index.php/archives/746 http://blogs.securiteam.com/index.php/archives/746 ) What I'm trying to say is, there's no substitute for seeing a full URL. Especially for security conscious users like the HN crowd. For the average user though this might be enough information.