I get it if Chrome developers want to stop spoofing of malicious urls like http://veryfamouswebsite.com:pwd@malicioussite.com.
However, I prefer the Firefox way: FF prompts you if you want to login with the username specified in the url.
That's cool, but how many users will understand what's being asked for? If the user says yes (and users will always just click the "go on do it" button), they basically agreed to being tracked indefinitely :-(
Comments
I get it if Chrome developers want to stop spoofing of malicious urls like http://veryfamouswebsite.com:pwd@malicioussite.com. However, I prefer the Firefox way: FF prompts you if you want to login with the username specified in the url.
That's cool, but how many users will understand what's being asked for? If the user says yes (and users will always just click the "go on do it" button), they basically agreed to being tracked indefinitely :-(
it is not so much about tracking, more about directing somebody to a web site they did not intend to visit
It only lasts until the session ends.