Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> "It's a very strange move indeed. maps.google.com implies an application lives there, far better than being on the root domain."

How does "maps.google.com" imply an application "lives there" any more than "google.com/maps"?

Technically speaking, "google.com/maps" is far superior to "maps.google.com" (check out the rest of the comments in this thread for examples: simpler DNS configuration, simpler certificate management, CORS, cookies, etc).



Technically speaking it goes around any security CORS and friends provide


> "Technically speaking it goes around any security CORS and friends provide"

CORS wasn't designed to "offer any security" in this specific scenario anyway.

By using "google.com/maps" they can simplify their systems (by not worrying caring about CORS).


Security is hard, money is easy. Simple choice!




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: