Slashdot Mirror


Google Wants To Kill the URL (wired.com)

As Chrome looks ahead to its next 10 years, the team is mulling its most controversial initiative yet: fundamentally rethinking URLs across the web. From a report: Uniform Resource Locators are the familiar web addresses you use everyday. They are listed in the web's DNS address book and direct browsers to the right Internet Protocol addresses that identify and differentiate web servers. In short, you navigate to WIRED.com to read WIRED so you don't have to manage complicated routing protocols and strings of numbers. But over time, URLs have gotten more and more difficult to read and understand. The resulting opacity has been a boon for cyber criminals who build malicious sites to exploit the confusion. They impersonate legitimate institutions, launch phishing schemes, hawk malicious downloads, and run phony web services -- all because it's difficult for web users to keep track of who they're dealing with. Now, the Chrome team says it's time for a massive change.

"People have a really hard time understanding URLs," says Adrienne Porter Felt, Chrome's engineering Manager. "They're hard to read, it's hard to know which part of them is supposed to be trusted, and in general I don't think URLs are working as a good way to convey site identity. So we want to move toward a place where web identity is understandable by everyone -- they know who they're talking to when they're using a website and they can reason about whether they can trust them. But this will mean big changes in how and when Chrome displays URLs. We want to challenge how URLs should be displayed and question it as we're figuring out the right way to convey identity."

If you're having a tough time thinking of what could possibly be used in place of URLs, you're not alone. Academics have considered options over the years, but the problem doesn't have an easy answer. Porter Felt and her colleague Justin Schuh, Chrome's principal engineer, say that even the Chrome team itself is still divided on the best solution to propose. And the group won't offer any examples at this point of the types of schemes they are considering. The focus right now, they say, is on identifying all the ways people use URLs to try to find an alternative that will enhance security and identity integrity on the web while also adding convenience for everyday tasks like sharing links on mobile devices.

7 of 282 comments (clear)

  1. Back to AOL? by agiacalone · · Score: 4, Interesting

    Didn't AOL try this back in the 90s with the 'AOL Keyword'? IIRC, it failed miserably.

  2. I didn't see a Request For Comments anywhere... by HotNeedleOfInquiry · · Score: 5, Interesting

    That used to be the first step in an internet protocol change. Does Google well and truly own the internet now?

    --
    "Eve of Destruction", it's not just for old hippies anymore...
    1. Re:I didn't see a Request For Comments anywhere... by squiggleslash · · Score: 4, Interesting

      RFCs are what you issue when you have a proposed standard. Right now Google are just saying "URLs suck, know what I mean? Right? You agree right?" which isn't really a "proposed standard" any more than "You know, it'd be awesome if I could send some text across the Internet" would have been enough to issue RFC 822.

      --
      You are not alone. This is not normal. None of this is normal.
  3. Where have we heard this before? by hyades1 · · Score: 3, Interesting

    So just like always, some powerful agent seeking to invade the privacy of individuals more comprehensively uses "security" as an excuse. Meanwhile, methods that could make the existing system far more secure (while preserving anonymity for those who need it) are ignored.

    If I remember correctly, Google just got caught investigating ways to help China's Big Brother regime weaponize its search engine by turning it into a government-friendly propaganda tool. Google needs to be told in no uncertain terms to shove this so far up its corporate arse the whole board gets a sore throat.

    --
    I've calculated my velocity with such exquisite precision that I have no idea where I am.
  4. No, it's not by rickb928 · · Score: 3, Interesting

    "Uniform Resource Locators are the familiar web addresses you use everyday."

    So far, so good.

    "They are listed in the web's DNS address book"

    Uh, NO. That's DNS, and that works with the part before slashes etc, right up to and including the TLD (.com, .edu, .info for example).

    "and direct browsers to the right Internet Protocol addresses that identify and differentiate web servers"

    Um, partly, that's DNS. Then the URL includes the info that web server needs to find and deliver whatever you were looking for.

    Who writes this crap anyways? Can't we get this right now and then?

    Other than that, I think the idea is not merely dangerous, it's unnecessary. Websites could solve this with simpler URLs, like their own individual versions of .bit/ly-type shortening. Let's encourage them and the software they depend on to make their visions publishable, instead of fixing what isn't broken, merely inconvenient...

    --
    deleting the extra space after periods so i can stay relevant, yeah.
  5. Too many TLDs by Comboman · · Score: 5, Interesting

    The recent expansion of Top Level Domains make it even more difficult. google.corn (that's GOOGLE.CORN in lower case) looks a lot like google.com in certain fonts.

    --
    Support Right To Repair Legislation.
  6. Re:In other news, Google wants to track you more by tlhIngan · · Score: 2, Interesting

    It is not acceptable for Google that some browsing bypasses Google search engine when people directly type in URLs.

    Remember the great dot-com shootout in the early 00's? Back when people wanted very special .com addresses because that's how people found you, by stumbling about composing URLs?

    Sites like sex.com, pets.com, books.com etc. etc. - those domains sold for $$$$$ back in the day. Nowadays it matters a lot less,because everyone Googles rather than tries random URLs. Doesn't hurt that half of the URLs you try will lead to a malware site these days.