> I would wager that most people who fall for phishing attacks are not people who look at or understand URLs to begin with. Updating the URL bar to show just th

> I would wager that most people who fall for phishing attacks are not people who look at or understand URLs to begin with. Updating the URL bar to show just the host is not going to cause more people to look at it. I respectfully disagree that it is less secure. Showing only the domain will reduce the clutter to where the user can determine which domain they are typing their password into. I say can because in the phishing example the user would be unable to determine the domain name. The full url is only a click away. A click that is going to be happening anyway when the user wants to copy the URL. I welcome the clean look as user. As a developer I will re-enable the full URL on my development machines, but not on my family members machines.