Category: Google|Aug 24, 2020 | Author: Admin

Google to trial drastically truncated URLs in Chrome in anti-phishing move

Share on

Google will run a trial with Chrome 86, the browser set to release in October, that will hide much of a site's URL as a way to foil phishing attacks.

"We're ... going to experiment with how URLs are shown in the address bar on desktop platforms," Emily Stark, Eric Mill and Shweta Panditrao, all members of Chrome's security team, wrote in an Aug. 12 post to a company blog. "Our goal is to understand -- through real-world usage -- whether showing URLs this way helps users realize they're visiting a malicious website, and protects them from phishing and social engineering attacks."

The test will roll out in Chrome 86 – currently slated to ship Oct. 6 – with participants chosen randomly. Stark, Mill and Panditrao did not specify the number of Chrome users, or even a percentage of the browser's total, who will see the address bar pilot. Enterprise-enrolled devices won't be included in this Chrome 86 experiment, they added.

Rather than display the entire URL in Chrome's address bar, the trial will instead condense it to what Google called the "registrable domain," which it explained means (the "most significant" part of the domain name). If the full URL for, say, a Computerworld article is https://www.computerworld.com/article/3571442/microsoft-sets-new-support-deadlines-for-ie11-and-edge.html, then the registrable domain would be computerworld.com.

Showing only the domain, the three Google engineers argued, might make it easier for users – those who look at the address bar, anyway (not everyone does) – to ensure they were at the right place, not at a malicious site they'd been tricked into visiting. "There are myriad ways that attackers can manipulate URLs to confuse users about a website's identity," Stark, Mill and Panditrao said. "(That) leads to rampant phishing, social engineering and scams."

(The trio cited a 2020 research paper – "Measuring Identity Confusion with Uniform Resource Locators" – to make their case. Of the nine who wrote the paper, two were from Google; the remaining were from the University of Illinois at Urbana-Champaign.)

To view the complete URL, the user simply moves the pointer atop the address bar and let it hover for a moment. At that time, Chrome reconstitutes the URL to its full form. Another way: Chrome will sport a new item in the right-click menu – "Always show full URLs" – that will set the address bar to show the whole URL for all sites.

Although Chrome 86 won't be available in the final ready-for-release form – Google calls that Stable – for months, users can put the test to, well, the test now. Using either the Canary or Dev builds (now at Chrome 86), users can enter chrome://flags in the address bar, then set these two items to Enabled and relaunch the browser:

#omnibox-ui-reveal-steady-state-url-path-query-and-ref-on-hover
#omnibox-ui-sometimes-elide-to-registrable-domain

(In Computerworld's test, the macOS version of Chrome 86 Dev did not display the "Always show full URLs" item in the right-click menu.)

This won't be the first time that Google has monkeyed with the way the URL appears in Chrome's address bar. Two years ago, for instance, Google dropped the www and m prefixes, but after pushback, reversed course on the former.

Sponsored Ads:

Comments:


Now the support is complete

Category: Apple|Mar 31, 2023 | Author: Admin

Shouldn't it happen anyway?!

Category: Apple|Mar 30, 2023 | Author: Admin

Does not have a single screw

Category: IT|Mar 29, 2023 | Author: Admin

If you do not switch to the new Windows, you will be denied Steam next year

Category: General|Mar 28, 2023 | Author: Admin

This may be the requirement for Windows 12

Category: Microsoft|Mar 27, 2023 | Author: Admin

Fixed the nasty Windows 11 privacy bug

Category: Microsoft|Mar 26, 2023 | Author: Admin

How to disable Bing button in Microsoft Edge?

Category: IT|Mar 25, 2023 | Author: Admin

This totally changes ChatGPT

Category: General|Mar 24, 2023 | Author: Admin

Fake ChatGPT stole Facebook accounts

Category: IT|Mar 23, 2023 | Author: Admin

New Apple products revealed

Category: Apple|Mar 22, 2023 | Author: Admin

OpenAI ChatGPT down! Users around the world unable to login and chat

Category: IT|Mar 21, 2023 | Author: Admin

Your disk may be much slower now

Category: General|Mar 20, 2023 | Author: Admin

Get complete price shock from this

Category: General|Mar 19, 2023 | Author: Admin

"iPhone 15 Pro Max breaks the record"

Category: Apple|Mar 18, 2023 | Author: Admin

Apple is testing a new generation

Category: Apple|Mar 17, 2023 | Author: Admin
more