Could Google's Test of Hiding Complete URLs In Chrome Become a Standard?
MojoKid (1002251) writes "The address bar in a Web browser has been a standard feature for as long as Web browsers have been around — and that's not going to be changing. What could be, though, is exactly what sort of information is displayed in them. In December, Google began rolling-out a limited test of a feature in Chrome called "Origin Chip", a UI element situated to the left of the address bar. What this "chip" does is show the name of the website you're currently on, while also showing the base URL. To the right, the actual address bar shows nothing, except a prompt to "Search Google or type URL". With this implementation, a descriptive URL would not be seen in the URL bar. Instead, only the root domain would be seen, but to the left of the actual address bar. This effectively means that no matter which page you're on in a given website, all you'll ever see when looking at the address bar is the base URL in the origin chip. What helps here is that the URL is never going to be completely hidden. You'll still be able to hit Ctrl + L to select it, and hopefully be able to click on the origin chip in order to reveal the entire URL. Google could never get rid of the URL entirely, because it's required in order to link someone to a direct location, obviously."
Why? It's easier, more informative, more transparent, and arguably better just to show a plain old URL field than add some extra layer of crap to 'hide' it and make it less useful...
What, do they want Chrome to be the next AOL?
No. Show the URL. Start trimming that down and next thing you know we'll be back with keywords...
For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
Couldn't they just output the SHA-512 of the URL and be done with it?
There's obvious ways to shoot for the phishing mitigations that this is apparently seeking to achieve, without turning the web into an app store. We used to make fun of stupid flash sites due to lack of linkability, is it really necessary to so thoroughly lunge off the cliff into this idiocy now?
I wonder how many bad guys are already thinking of ways to exploit this. Yes the domain is more prominent, that should have been fixed years ago - but how many sites out there are completely free of XSS vulnerabilites? When this eventually becomes non-optional, how am I going to spot https://mybank.foo/?q="><script>evil; stuff;</script>
?
The perfect irony of course is that Google's own pagerank depends on cross-site linking... By robbing people of URLs, a future generation of net users will grow up never knowing how to share a page with their friends unless there's a sharing mechanism within the same site their friends already use.
Google could never get rid of the URL entirely, because it's required in order to link someone to a direct location, obviously.
Google doesn't want people to go to a website directly on their own. They want folks to search for it with Google, obviously.