Hacker News new | ask | show | jobs
by thexa4 2359 days ago
The attacker wouldn't use that one in that case though.

    https://uk.co.ee/billing-update-jan02.info
    https://uk.co.ee-billing-update-jan02/info
Would be more likely.

Perhaps an animation showing both would help.

1 comments

You're right, the benefit isn't really about character differences. In both cases users need to be taught that '-' isn't a divider and '.' is a divider. The benefit is that it would be easier to teach people to start on the left then search right than it is to teach people to start at the leftmost / (but not the ones in the scheme) then search left.