[weinzierl]

It was a good idea for Google but it was never a good idea for the user. We should have used the 15 years to raise awareness about phishing risks and I believe it would have been a lot easier to educate users about two distinct fields than teaching them why it may be OK to enter a half remembered fragment of a name to get some entertainment but that it is very risky if you do it with the name of your bank.

[janalsncm]

I don’t see how that increases the phishing risk. If the user mistypes a url, DNS doesn’t have any anti-spam mechanisms. If they mistype part of a url, Google can correct it.

Whether or not they do so in practice is another question of course and there are well publicized examples of them failing.

If what you’re saying was correct then preventing most phishing emails would simply be a matter of “educating users”. I believe at scale that is an impossible task.

[weinzierl]

The point is that you rely on the search engine to correct it properly.