Hacker News Reader

Comment by thexa4 | Hacker News Reader

The attacker wouldn't use that one in that case though.

    https://uk.co.ee/billing-update-jan02.info
    https://uk.co.ee-billing-update-jan02/info

Would be more likely.

Perhaps an animation showing both would help.

View on HN

You're right, the benefit isn't really about character differences. In both cases users need to be taught that '-' isn't a divider and '.' is a divider. The benefit is that it would be easier to teach people to start on the left then search right than it is to teach people to start at the leftmost / (but not the ones in the scheme) then search left.

Reply on news.ycombinator.com