My CISO has all but said he’s going to prevent any auto-rollout of that shit because it breaks decades of user training and TRUNCATES THE FRONT OF THE URL, NOT THE BACK LIKE ANY SENSIBLE APPLICATION.

Like, let’s make it so Steve in accounting can’t see that the login link he wants to click is actually haxxor.com instead of bank.com, makes perfect fucking sense.