> Parameters at the end of web addresses are visually hidden when the address field is not focused
I think those are terrible, terrible ideas; to the best of my knowledge this behavior was pioneered by Chrome and is now growing like a cancer, under the false premise that "non-technical users don't understand urls".
How are they going to ever understand them if browsers don't show it to them??!? Hiding query parameters breaks the relation between a url and its content; now all of Google is under the same "www.google.com" url: how is that "better"?
By the same principle that "young people don't understand words" let's remove all printed words and simply print books with the same cover and the same title -- they're all "books" anyway.
I've realized that hiding of https:// actually makes sense. You could mistakenly believe that page delivered over https:// is secure, but there are several cases, when it's not true (e.g. page embedding JavaScript over plain HTTP).
A true security indicator replacing https:// in the addressbar makes more sense, and it shows secure only when connection is really secure (as far as SSL is concerned of course).
Edit: plus if this http://news.ycombinator.com/item?id=1921100 is true (don't have Opera 11 here to check it) then hiding protocol it's hardly a problem.
hxxp://mc564.mail.yahooo.cz/mc/welcome?.gx=1&.tm=1290173262&.rand=8a8hcjme2nb60#_pg=showMessage& sMid=13&&filterBy=&.rand=1020435964&midIndex=13&mid=1_41637_AFNv%2FNgAARb0TMWfVwycxVDDYoo&fromId=sendreceive@iso50.com&m=1_45237_AFRv%2FNgAALZZTMxQEQbt1QDuB60,1_44482_AFRv%2FNgAAX6dTMscRg7DzmBp0%2BM,1_43847_AFRv%2FNgAAWU6TMoFPgz8kG1tlus,1_43135_AFVv%2FNgAAPHWTMixWAJSDRUfECQ,1_42368_AFNv%2FNgAAEUnTMcCHAZk2EsgYvc,1_41637_AFNv%2FNgAARb0TMWfVwycxVDDYoo,1_40918_AFdv%2FNgAAOo%2FTMMVTQtEN0nYhxw,1_40277_AFdv%2FNgAAK2ETMGqmwMZ%2Fm865vA,1_39560_AFdv%2FNgAAJLQTMBzaQzIs28a2Uc,1_38916_AFJv%2FNgAAGfRTL97CgGm0yp6dBs,1_38170_AFZv%2FNgAAAK%2BTL4DxwdptRQfn90,&sort=date&order=down&startMid=0&hash=30c49f5b9f61273beed1953ae7674c2f&.jsrand=5917415
How likely are you to notice the problems with this URL? I'm pretty sure I wouldn't. I wouldn't be surprised to find out that non-technical users consider the address field a sort of write-only space; they type something comprehensible in there, and the browser destroys it. The simplified address field with the bold domain name is a lot easier to read, and that probably increases the chances that it will be read, rather than ignored. The full URL is just one click away.It's changing the layout.
If users don't look at the address bar and don't understand urls, how are they going to tell something is amiss when they visit the following domains (all available at the time of writing):
- gnail.fr - gnail.me - gmail.se.com - gmail.uk.net - yahooo.uk.com - yahooo.eu.com
Only showing the domain does not help the non-technical user: you can have a fake domain look quite legitimate to the non-technical eye.
I think I'd be more likely to notice typos like "yahooo" or "gnail" with the new display method, without the noise of a thousand-character URL surrounding them. That is by no means the be-all and end-all of anti-phishing technology. It's just giving me one more chance to see something that might be amiss.
Hiding query parameters hides yet another thing that's mostly unreadable anyway.
Comparing this to "young people don't understand words" is quite silly. Printed words are important. The message is important. And in fact, language is constantly being simplified, and has been simplified throughout history. Just like the address bar in Opera is now simplified.
Opera avoided the issue by showing full URL when you focus addressbar, so you see what you're copying and can edit protocol part.