I'm using the Firefox add-on version 1.7.8, with the default URL Components sett... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

decode on Feb 15, 2012 | parent | context | favorite | on: Simplified Sign-Up and Log-In Flows

I'm using the Firefox add-on version 1.7.8, with the default URL Components settings (subdomains not enabled), and it uses "bbc.co.uk" as the domain for "www.bbc.co.uk" and "evil.co.uk" as the domain for "evil.co.uk", so the problem you described doesn't exist.

Maybe this was a problem in an earlier version and it's been fixed?

cpeterso on Feb 16, 2012 [–]

I'll have to double-check. The problem is still reproducible on the (albeit limited) PasswordMaker online version:

http://passwordmaker.org/passwordmaker.html

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact