Slashdot Mirror
Google Wants To Kill the URL (wired.com)
As Chrome looks ahead to its next 10 years, the team is mulling its most controversial initiative yet: fundamentally rethinking URLs across the web. From a report: Uniform Resource Locators are the familiar web addresses you use everyday. They are listed in the web's DNS address book and direct browsers to the right Internet Protocol addresses that identify and differentiate web servers. In short, you navigate to WIRED.com to read WIRED so you don't have to manage complicated routing protocols and strings of numbers. But over time, URLs have gotten more and more difficult to read and understand. The resulting opacity has been a boon for cyber criminals who build malicious sites to exploit the confusion. They impersonate legitimate institutions, launch phishing schemes, hawk malicious downloads, and run phony web services -- all because it's difficult for web users to keep track of who they're dealing with. Now, the Chrome team says it's time for a massive change.
"People have a really hard time understanding URLs," says Adrienne Porter Felt, Chrome's engineering Manager. "They're hard to read, it's hard to know which part of them is supposed to be trusted, and in general I don't think URLs are working as a good way to convey site identity. So we want to move toward a place where web identity is understandable by everyone -- they know who they're talking to when they're using a website and they can reason about whether they can trust them. But this will mean big changes in how and when Chrome displays URLs. We want to challenge how URLs should be displayed and question it as we're figuring out the right way to convey identity."
If you're having a tough time thinking of what could possibly be used in place of URLs, you're not alone. Academics have considered options over the years, but the problem doesn't have an easy answer. Porter Felt and her colleague Justin Schuh, Chrome's principal engineer, say that even the Chrome team itself is still divided on the best solution to propose. And the group won't offer any examples at this point of the types of schemes they are considering. The focus right now, they say, is on identifying all the ways people use URLs to try to find an alternative that will enhance security and identity integrity on the web while also adding convenience for everyday tasks like sharing links on mobile devices.
"People have a really hard time understanding URLs," says Adrienne Porter Felt, Chrome's engineering Manager. "They're hard to read, it's hard to know which part of them is supposed to be trusted, and in general I don't think URLs are working as a good way to convey site identity. So we want to move toward a place where web identity is understandable by everyone -- they know who they're talking to when they're using a website and they can reason about whether they can trust them. But this will mean big changes in how and when Chrome displays URLs. We want to challenge how URLs should be displayed and question it as we're figuring out the right way to convey identity."
If you're having a tough time thinking of what could possibly be used in place of URLs, you're not alone. Academics have considered options over the years, but the problem doesn't have an easy answer. Porter Felt and her colleague Justin Schuh, Chrome's principal engineer, say that even the Chrome team itself is still divided on the best solution to propose. And the group won't offer any examples at this point of the types of schemes they are considering. The focus right now, they say, is on identifying all the ways people use URLs to try to find an alternative that will enhance security and identity integrity on the web while also adding convenience for everyday tasks like sharing links on mobile devices.
It is not acceptable for Google that some browsing bypasses Google search engine when people directly type in URLs.
Google, just doing its part in ripping the last bits of the 'web' to shreds. I guess they really do want their search engine to be the place from which all information originates.
It's about time we revert back to the future with the AOL keywords we all have been sorely missing from our lives!!!
Paul Lenhart writes words!
PRO-TIP: There's this magical thing called a bookmark that stores all those 'so-over-complicated' URL thingies under a name that you can even change yourself so your teeny little human brain can understand it! Ain't that amazing?</extreme_sarcasm>
Seriously, Google, what the actual fuck is wrong with you?
Or is it that people have become so fucking dumb that they really can't type in {website}.{top_level_domain}? Considering all the stupid shit I see in the news pretty much every single day anymore I'd be very tempted to believe that, too.
I can guess what Googles solution will be: if you want to host web content you need to purchase a virtual website on their cloud and then they will issue you a code that people can use to type or scan into Chrome. After all, think of the terrorists and/or the children.
With Google mail and voice and everything else and now this. I guess Google wants to be the 21st century AOL.
At least we won't have to worry about the endless stream of CDs in the mail.
Didn't AOL try this back in the 90s with the 'AOL Keyword'? IIRC, it failed miserably.
People have a really hard time understanding URLs
Understatement of the year. "People" don't understand URLs at all. That doesn't mean we should let Google be the arbiter of identity on the internet.
That used to be the first step in an internet protocol change. Does Google well and truly own the internet now?
"Eve of Destruction", it's not just for old hippies anymore...
So just like always, some powerful agent seeking to invade the privacy of individuals more comprehensively uses "security" as an excuse. Meanwhile, methods that could make the existing system far more secure (while preserving anonymity for those who need it) are ignored.
If I remember correctly, Google just got caught investigating ways to help China's Big Brother regime weaponize its search engine by turning it into a government-friendly propaganda tool. Google needs to be told in no uncertain terms to shove this so far up its corporate arse the whole board gets a sore throat.
I've calculated my velocity with such exquisite precision that I have no idea where I am.
"Uniform Resource Locators are the familiar web addresses you use everyday."
So far, so good.
"They are listed in the web's DNS address book"
Uh, NO. That's DNS, and that works with the part before slashes etc, right up to and including the TLD (.com, .edu, .info for example).
"and direct browsers to the right Internet Protocol addresses that identify and differentiate web servers"
Um, partly, that's DNS. Then the URL includes the info that web server needs to find and deliver whatever you were looking for.
Who writes this crap anyways? Can't we get this right now and then?
Other than that, I think the idea is not merely dangerous, it's unnecessary. Websites could solve this with simpler URLs, like their own individual versions of .bit/ly-type shortening. Let's encourage them and the software they depend on to make their visions publishable, instead of fixing what isn't broken, merely inconvenient...
deleting the extra space after periods so i can stay relevant, yeah.
The recent expansion of Top Level Domains make it even more difficult. google.corn (that's GOOGLE.CORN in lower case) looks a lot like google.com in certain fonts.
Support Right To Repair Legislation.
They'll probably want a 16 hexadecimal string with a dotted 48 bit octal sub identifier. Because it's obvious.
putting the 'B' in LGBTQ+
maybe we should start arresting criminals -- you know, like in every other part of life -- instead of trying to make consumers play their own game of cops and robbers every minute of every day.
I live in the inner city of a high crime city. Anytime I walk outside, I have to pay attention, since there are dangers lurking nearby. I don't expect the police to make everything totally safe, nor would I want to live in the kind of absolute police state environment that it would require. Similarly, I don't want a "totally safe" internet, where all content is curated and carefully vetted.
This right here is what I came to say ^
Just show the domain from the cert for the address bar until you click on it, then show the actual url.
Seriously. Don't fix things that are not broken.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
People have a hard time understanding street addresses. Lets just assign every address a single 12 digit number and pay a private corporation a zillion dollars to provide a lookup service.
I'm not suggesting either one.
I'm suggesting that after a crime has been committed, reported, and identified, that police then arrest those responsible.
It's not about making crime difficult, and it's not even about deterring future criminals. It's simply about making the price of crime much much higher than it is today.
*throws chair*
Escher was the first MC and Giger invented the HR department.
Not only does Google want more stuff to go through them they are complicit if not one of the prime agitators of this phenomenon.
For example to get directions to go from the White House to the US Capitol you get this URL (used the quotes so can see the whole URL w/o having to scroll over): "https://www.google.com/maps/dir/The+White+House,+1600+Pennsylvania+Ave+NW,+Washington,+DC+20500/US+Congress+-+Sergeant+at+Arms,+1+S+Capitol+St+SW,+Washington,+DC+20515/@38.8950631,-77.0311265,15z/data=!3m1!4b1!4m13!4m12!1m5!1m1!1s0x89b7b7bcdecbb1df:0x715969d86d0b76bf!2m2!1d-77.0365298!2d38.8976763!1m5!1m1!1s0x89b7b7b057914a6b:0x617d58ed260bc5e2!2m2!1d-77.0090646!2d38.8899056"
All of the characters after the +20515 is completely unneeded for the above link to work. "https://www.google.com/maps/dir/The+White+House,+1600+Pennsylvania+Ave+NW,+Washington,+DC+20500/US+Congress+-+Sergeant+at+Arms,+1+S+Capitol+St+SW,+Washington,+DC+20515" is all that is needed for the link to work, and can even whittle that down more by another 49 characters to "https://www.google.com/maps/dir/1600+Pennsylvania+Ave+NW,+Washington,+DC+20500/1+S+Capitol+St+SW,+Washington,+DC+20515" and it would still work. Perhaps they should start leading by example and fix what they helped create instead of worrying about what to replace it with.
1. Ted Neilson's Xanadu. Never got off the ground.
2. IPv6. The original spec required all Internet traffic to be over IPSec, with server networks using digital certificates to prove their identity.
3. Class 3 SSL certificates. These were certificates released if the person could prove their identity and could prove they had the right to the certificate. Nothing more for user certificates, proof of ownership of domain name and business for server certificates.
4. Smart web pages. If you're using AJAX and servlets, everything can be done in data, you don't need to mess with the URL.
The result? A few of these are utilized, but most webmasters either don't understand the technology, won't use it or have been ordered not to by their boss.
Hacking the URI bar won't change that.
If Google wanted a better system, they'd start by looking at TUBA, one of the IPng/IP6 candidates. If you can uniquely express a resource with an address, you can give it a name. TUBA has infinitely variable length addresses, so it's easy to code a directory path into the physical address. It's an address so it can be given a unique name.
Your webserver is now a virtual network rather than a filesystem.
That doesn't sound like what they're doing.
It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
TLD protection won't help you when a scammer buys "BankOfARNERICA.COM", or when a lot of legitimate businesses outside Colombia are setting up their online presence with a Colombian (.CO) domain anyway. Or would you prefer to contribute to Internet balkanization by blocking Irish sites like MODERN.IE (web dev resource by Microsoft) and British Indian Ocean Territory sites like GITHUB.IO by default if the device happened to geolocate to a different country at first browser launch? In particular, British Indian Ocean Territory is uninhabited.
Whatever steaming pile is on offer from Google, it would be nice if we could at least do away with little-endian hostnames.
That would be an easy fix and probably stop most of the phony sites right there. So it's not going to happen.
to be fair, they also offer this from their website: https://goo.gl/maps/FbEetWBSGz...
Millions long for immortality who do not know what to do with themselves on a rainy Sunday afternoon. -- Susan Ertz
Google does not want to "kill" URLs.
The Wired story quotes plans to attempt changing how URLs are displayed:
But this will mean big changes in how and when Chrome displays URLs. We want to challenge how URLs should be displayed and question it as we’re figuring out the right way to convey identity.
They cite previous experience when they attempted an "origin chip," later removed. Again, this was only an attempt to render things in a simpler manner. At no point in the story does any Google representative propose replacing URLs; all that language comes from the Wired writer. Maybe one could illegitimately surmise that some constraint on URLs might be implied in all this but there is no conceivable way to reach "KILL!" That's just fake.
This is Wired clickbait parroted by Slashdot.
Maw! Fire up the karma burner!
Didn't Dilbert suggest this back in 1998.
There's too long, but then there's also indecipherable.
URL shortening services are actually another problem for phishing, since it obfuscates the link by design.
XML is like violence. If it doesn't solve the problem, use more.