beltzner wrote:
On 2/14/07, Ben Bucksch <[EMAIL PROTECTED]> wrote:
I still think that showing *only* the second level domain - *not* as
part of the URL, which is technical glibberish for most people - is -
next to bookmarks - the best approach against phishing, even though a
dramatic change in browser UI. I *don't* think that just bolding the URL
is enough.
Interesting. I'd buy that argument, really.
I think the meta-question is: should an unfocussed URL bar always, on
principle, show all parts of the URL (length issues aside), even if they
are styled differently? If not, which do we remove or change, and when?
I think a focussed URL bar has to be pretty close to a text field in
function, even if different bits of the URL are separated, bolded,
highlighted or whatever in some way. Moving away from this breaks
various type-into, copy and paste scenarios which people use a lot.
But, trying to square the circle, I also think it's important that text
in the URL bar not shift around when you focus it.
* Show domain very prominently in the middle of the urlbar, so that
even a normal user can't miss it. Not as textfield, but
non-editable, selectable, bold label.
I'd actually keep this in the location bar, but give it a very
button-like UI treatment. That way it also acts as a "snapback" to the
root domain.
If it's button-like, presumably that would mean you can't click it to
edit it?
* Show the EV cert holder, if available, next to the domain. No
other special treatment of EV.
For EV I was going to suggest that we don't show the domain name, but
instead show the name of the cert holder. So [Paypal, Inc.].
It would need to be [Paypal, Inc. (US)], for important disambiguation
purposes. The idea is that a combination of the C field (country) and
the O field (organisation) is pretty much unique. Given that we are
definitely talking about countries rather than languages, we could use
flags here if we wanted.
* Keep search field
Yeah, that's not going anyplace soon. ;)
Unless we decide to combine the search field and the URL field? But
perhaps that possibility is incompatible with all these other ideas.
As long as the resulting structure looks sort of like a URL, I don't
think you're actually going to see this freakout, actually. I think
you will if you take away their ability to quickly cut, paste, and
edit the URL.
Yes. Form doesn't matter too much if the capabilities are there. There's
no problem with the URL bar e.g. permanently showing some space between
the domain and the rest of the URL, as long as the space doesn't show up
when I select the URL and copy it.
Anyway, we're into UI design, which I promised myself I wouldn't do in
this forum, but I just find this idea of making the location bar
smarter and more useful so *intriguing*! :)
Where should we be having this discussion? Do you want to move over to
m.d.a.firefox?
Gerv
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security
