Hacker News new | ask | show | jobs
by SmellyGeekBoy 2358 days ago
I don't see how this is any more informative to your average layman?
2 comments

Look at these 2:

    https://ee.co.uk.billing-update-jan02.info
    https://ee.co.uk/billing-update-jan02.info
There's just a single character difference. The layperson will think they mean the same thing. Now look at these 2:

    https://info.billing-update-jan02.uk.co.ee
    https://uk.co.ee/billing-update-jan02.info
There's a big difference there. People can easily see something is abnormal.
The attacker wouldn't use that one in that case though.

    https://uk.co.ee/billing-update-jan02.info
    https://uk.co.ee-billing-update-jan02/info
Would be more likely.

Perhaps an animation showing both would help.

You're right, the benefit isn't really about character differences. In both cases users need to be taught that '-' isn't a divider and '.' is a divider. The benefit is that it would be easier to teach people to start on the left then search right than it is to teach people to start at the leftmost / (but not the ones in the scheme) then search left.
It means that information to the left is always the important part. Right now you have to find the '/', evaluate the components leftwards, return to the '/' and evaluate components rightwards.

Given that finding the '/' is not always trivial (broken screen example in the article) and doing this requires you to think a lot of people won't do it.