Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Apple did this a while ago. Safari only shows the domain and the lock icon, nothing else.

I get the discussion about Google changing the web to something that pleases their pockets over everything else, but I am not so sure whether that's the actual motivation in this case. Non-technical users can't do a lot with the rest of the URL anyway and even I as a technical user didn't mind Safari hiding the path and scheme up to now.



Which worked really well with https://stripe.ian.sh/

Granted, they revoked his cert after he published, but it goes to show how easy it would be to fake an EV cert and have safari users have no idea.


That's a different thing entirely. Google, as far as I know, has no plans to hide the domain entirely and only show information from EV certs.


Yes. I agree with your characterization here.

I'm just blown away that Apple hasn't reverted this. Imo it's a huge vuln.


Yep. I've found the dissonance here particularly jarring - collective shrug when Apple hides the URL, but if Google does so we get huge outrage and assumptions that this must clearly be done primarily for malicious reasons.

I know it's fashionable to hate Google right now, but this reaction seems a little over the top.


My only defense is Safari on iOS - the screen is so small, showing the full URL even with the pathname grayed would make the URL seem bloated; at least seeing the real domain is better for security and UX. Can't defend the full URL being hidden by default on desktop, though.


I think the difference is market share. Chrome is at an estimate 60-70% of all worldwide browsing. On desktop, it is over 70%. As a result, most developers (the primary audience of Hacker News) use Chrome as their primary browser so they tend to see what their users do. Safari has a fraction of that; 15% overall and 5% on desktop. The truth is that this is being discussed with Google because it affects the vast majority of users whereas previous changes affected few (and even fewer in the Hacker News core audience)


Because Safari has a tiny user base?


The short, unkind answer is that people shrug because Safari is not big enough to care about. You'd see the same apathetic response if Microsoft hid URLs from Edge.


> collective shrug when Apple hides the URL, but if Google does so we get huge outrage and assumptions that this must clearly be done primarily for malicious reasons.

Who uses Safari? People depend on Chrome on all sorts of platforms. Screwing with the URL field affects millions of people.


I use desktop Safari because it is much more energy efficient than Chrome.


Safari usage is too low for most to rage about.


They also made a checkbox to not hide it.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: