Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Bizarre choice for a domain huh, googlecloudpresscorner.com…

With all the domains in the world, they pick one that almost looks fake. Why not presscorner.google.com? (Or why not their TLD…)

Anyways, I look forward to some new improvements in Gitlab. Seems a little vague on the details, but I think some different flavors of LLMs should prove interesting. Seems likely it’d spit out different results than what OpenAI might give you.

Might indicate that Gitlab is going the direction of getting swallowed by Google though. Feels like these tech companies are playing Katamari and swallowing up everything to make these massive vertical stacks.



I think it's due to cookies. That's why there's e.g. googleusercontent.com, ggpht.com etc. That way if users find a way to upload malicious content (or e.g. blog is compromised) you can't get users' Google cookies


They have their own tld, .goog, they could surely have put the website under their instead to at least gain some trust, instead of the current abomination of a domain.

Or, you know, just use subdomains which has existed since forever...


Subdomains don't solve the problem, because Google very much intentionally puts the user session cookie on the root of .google.com, thereby sharing with all subdomains.


The tld he is talking about is different though right?


Yes, but I read that as suggesting they could use their own tld OR use subdomains. If you open a new domain on that tld, you don't need subdomains to protect Google account cookies.


If only there was some sort of system of domain names that could be used to indicate the demarcation points...


Google's cookie situation is complicated, because they have one login that people expect to work across mail.google.com, docs.google.com, drive.google.com, etc. Without going to a ton of server-side gymnastics, the most seamless way to connect all those properties is to set the session ID cookie on .google.com, allowing access to all subdomains recursively.

There's no way to exclude certain subdomains, so once you've decided to share a cookie between subdomains you have to use a new domain if you want to exclude a site from sharing.


> There's no way to exclude certain subdomains

I think Google should fix this. The alternative is endless domain sprawl, for all time.


I'm kind of surprised Google would even bother with cookies these days, as there are so many other ways to track users.


It's not for tracking, it's for sessions (you know, one of the original purposes of cookies).


The site is probably contracted to a third party so they don't want it to live under google.com for security reasons.

However strange that they didn't use withgoogle.com which IIRC is a commonly used separate domain for this type of thing.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: