L(O*62).ONG: Make your URL longer

I am the author, I wanted to publish it myself, I didn&#x27;t expect you had already published it. Thank you very much.<p>Encountered quite a few problems during the deployment, mainly related to HTTPS certificates.<p>The longest segment of a domain name is 63 characters. The maximum length of an HTTPS certificate commonName is 64 characters.<p>This caused Cloudflare, Vercel, and Netlify to be unable to use Let&#x27;s Encrypt to sign HTTPS certificates (because they used the domain name as the commonName), but Zeabur can use Let&#x27;s Encrypt to sign HTTPS certificates.<p>Finally, the Cloudflare certificate was switched to Google Trust Services LLC to successfully sign.<p>Related certificates can be viewed at <a href="https:&#x2F;&#x2F;crt.sh&#x2F;?q=loooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo.ong" rel="nofollow">https:&#x2F;&#x2F;crt.sh&#x2F;?q=looooooooooooooooooooooooooooooooooooooooo...</a>

I hate how good this is.<p>Here: (literally) <a href="https:&#x2F;&#x2F;loooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo.ong&#x2F;loooooooooOOoOooooooooooooOOOoOoooooooooooOOOoOoooooooooooOOOoooooooooooooOOOooOOooooooooooOOOoOoooooooooooOoOOOOooooooooooOoOOOOoooooooooOOoOOOooooooooooOOooOoOoooooooooOOOoOOOoooooooooOOOooOOooooooooooOoOOOooooooooooOOOOooOoooooooooOOoooOOoooooooooOOoOOOOoooooooooOOoOOoOoooooooooOOoooOooooooooooOOoOooOoooooooooOOoOOOooooooooooOOooooOoooooooooOOOoOoooooooooooOOoOOOOoooooooooOOOooOoooooooooooOoOOOooooooooooOOoooOOoooooooooOOoOOOOoooooooooOOoOOoOooooooooooOoOOOOoooooooooOOoOooOoooooooooOOOoOoooooooooooOOooOoOoooooooooOOoOOoOooooooooooOOOOOOoooooooooOOoOooOoooooooooOOooOooooooooooooOOOOoOooooooooooOOoOooooooooooooOOooooooooooooooOOoOoOooooooooooOOoOooooooooooooOOooOOooooooooooOOoooOooooooooooOOOooOooooooooooOOoOOong" rel="nofollow">https:&#x2F;&#x2F;looooooooooooooooooooooooooooooooooooooooooooooooooo...</a>

There should be a label telling people they need the protocol first, as soon as I entered I wrote &quot;google.com&quot; and nothing happened, confused me for a bit and thought there was something broken or maybe it was a victim of a HN hug.

I made something similar to make links look &quot;sketchy&quot;<p>will probably break any auto linking stuff but should work if copy&amp;pasted or properly linked<p><pre><code> https:&#x2F;&#x2F;sketchylinkasdf.com&#x2F;ssl_webmaster.zip&#x2F;qwerty&#x2F;&lt;IMG SRC=&quot;javascript:alert(&#x27;XSS&#x27;)&quot;&#x2F;a95a33ab-9f0d-4f64-9cf3-a80d48593de0</code></pre>

A company called Halibut Stuff used to sell T-shirts that came with free email forwarding.<p>I was myself@iwenttodefcon7.andalligotwas.thislousyemailaddress.com<p>It broke a LOT of signup forms.<p>I was working in software testing at the time and we talked about setting up a &quot;likely to break things&quot; email service and selling it to other testers, but realized that the people who&#x27;d need it would find it hard to explain to the people who write the checks.

I love how you encode the url as binary then replace the 0&#x27;s and 1&#x27;s with O&#x27;s and o&#x27;s. This is genius.

The seemingly required <a href="https:&#x2F;&#x2F;" rel="nofollow">https:&#x2F;&#x2F;</a> should be prefilled in the form

Am I having a stroke? I am 100% certain I saw this exact topic with these exact comments yesterday, but here we are with all of them saying they&#x27;re from 5 hours ago.

Be wary with making this kind of website. I made something similar long time ago (urllengthener.sadale.net) and got my site reported for &quot;spam campaign&quot;. Turns out that the spammer was abusing my site to generate spam link. I handled that promptly by shutting down my site and didn&#x27;t receive any penalty for that.<p>The way how it worked is that the spammer used my urllengthener as a redirection service to a website that looks like an incomplete project, which is actually a disguise. There&#x27;s javascript code on their site that if there&#x27;s a URL fragment identifier (the hash thingie postfix for URL) detection mechanism and if the URL fragment identifier matches an ad of their own, it&#x27;d redirect to the actual spam ad.<p>Let&#x27;s say the spammer owns example.org. The spammer would generate link with my service such that <a href="https:&#x2F;&#x2F;urllengthener.sadale.net&#x2F;foobarbaz" rel="nofollow">https:&#x2F;&#x2F;urllengthener.sadale.net&#x2F;foobarbaz</a> would redirect to <a href="https:&#x2F;&#x2F;example.org" rel="nofollow">https:&#x2F;&#x2F;example.org</a>. Then it&#x27;d send spam with a link of <a href="https:&#x2F;&#x2F;urllengthener.sadale.net&#x2F;foobarbaz#identifierXYZ" rel="nofollow">https:&#x2F;&#x2F;urllengthener.sadale.net&#x2F;foobarbaz#identifierXYZ</a> to the victim. Then the victim would click on the link, which redirects him to <a href="https:&#x2F;&#x2F;example.org&#x2F;#identifierXYZ" rel="nofollow">https:&#x2F;&#x2F;example.org&#x2F;#identifierXYZ</a>, which would show victim the ad. <a href="https:&#x2F;&#x2F;example.org&#x2F;" rel="nofollow">https:&#x2F;&#x2F;example.org&#x2F;</a> looks legit on its own and there is no log shown on the HTTP server because the URL fragment identifier is a client-side thing. I&#x27;m kind of thankful of that spam abuse report. Otherwise I might have never found out.<p>(Remarks: example.org isn&#x27;t the actual spam site. I just use this domain name as an example.)<p>I don&#x27;t have the time for now but I think I should make a write up about that some time later.<p>And I&#x27;ve tested your service and apparently your site is vulnerable for the exact same kind of abuse as mine. I&#x27;d strongly recommend you to at least disabling redirection of URL fragment identifier. Example of URL that&#x27;s prone to abuse: <a href="https:&#x2F;&#x2F;loooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo.ong&#x2F;loooooooooOOoOooooooooooooOOOoOoooooooooooOOOoOoooooooooooOOOoooooooooooooOOOooOOooooooooooOOOoOoooooooooooOoOOOOooooooooooOoOOOOoooooooooOOooOoOoooooooooOOOOooooooooooooOOooooOoooooooooOOoOOoOoooooooooOOOoooooooooooooOOoOOoooooooooooOOooOoOooooooooooOoOOOooooooooooOOoOOOOoooooooooOOOooOooooooooooOOooOOOooooooooooOoOOOOng#test" rel="nofollow">https:&#x2F;&#x2F;looooooooooooooooooooooooooooooooooooooooooooooooooo...</a>

Wouldn&#x27;t it be possible to use subdomains to make it _looonger_?<p>From my understanding the domain could be 255 characters long.<p><a href="https:&#x2F;&#x2F;a.lot.looooooooo(...)nger.than.looooooooo(...).ng" rel="nofollow">https:&#x2F;&#x2F;a.lot.looooooooo(...)nger.than.looooooooo(...).ng</a>

This is one of the dumbest things I&#x27;ve come across in a long time.<p>I absolutely love it.

Linked in the footer of that website is <a href="https:&#x2F;&#x2F;llili.li&#x2F;" rel="nofollow">https:&#x2F;&#x2F;llili.li&#x2F;</a>. Even better!

<a href="https:&#x2F;&#x2F;loooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo.ong&#x2F;loooooooooOOoOoOooooooooooOOooooOoooooooooOOOoOOooooooooooOOooooOoooooooooOOOooOOoooooooooOOoooOOoooooooooOOOooOooooooooooOOoOooOoooooooooOOOoooooooooooooOOOoOooooooooooooOOOoOooooooooooOOooooOoooooooooOOoOOoooooooooooOOooOoOoooooooooOOOooOooooooooooOOOoOooooooooooooOoOoooooooooooooOoOooOng" rel="nofollow">https:&#x2F;&#x2F;looooooooooooooooooooooooooooooooooooooooooooooooooo...</a>

<a href="https:&#x2F;&#x2F;loooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo.ong&#x2F;loooooooooOOoOooooooooooooOOOoOoooooooooooOOOoOoooooooooooOOOoooooooooooooOOOooOOooooooooooOOOoOoooooooooooOoOOOOooooooooooOoOOOOoooooooooOOoOOOooooooooooOOooOoOoooooooooOOOoOOOoooooooooOOOooOOooooooooooOoOOOooooooooooOOOOooOoooooooooOOoooOOoooooooooOOoOOOOoooooooooOOoOOoOoooooooooOOoooOooooooooooOOoOooOoooooooooOOoOOOooooooooooOOooooOoooooooooOOOoOoooooooooooOOoOOOOoooooooooOOOooOoooooooooooOoOOOooooooooooOOoooOOoooooooooOOoOOOOoooooooooOOoOOoOooooooooooOoOOOOoooooooooOOoOooOoooooooooOOOoOoooooooooooOOooOoOoooooooooOOoOOoOooooooooooOOOOOOoooooooooOOoOooOoooooooooOOooOooooooooooooOOOOoOooooooooooOOoOooooooooooooOOooooooooooooooOOoOoOooooooooooOOoOoOooooooooooOOoOOOooooooooooOOooOoooooooooooOOOoooooooooooooOOooOOng" rel="nofollow">https:&#x2F;&#x2F;looooooooooooooooooooooooooooooooooooooooooooooooooo...</a>

This feels about as long as any link Facebook adds with the appended `fbcid=` url parameter.

I didn&#x27;t know I needed this until I actually saw this.<p><a href="https:&#x2F;&#x2F;loooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo.ong&#x2F;loooooooooOOoOooooooooooooOOOoOoooooooooooOOOoOoooooooooooOOOoooooooooooooOOOooOOooooooooooOOOoOoooooooooooOoOOOOooooooooooOoOOOOoooooooooOOOooOOoooooooooOOOoooooooooooooOOooooOoooooooooOOoooOOoooooooooOOooOoOooooooooooOoOOOooooooooooOOOoOoooooooooooOOoooOOoooooooooOOOooOOoooooooooOOooOoOoooooooooOOoOOOooooooooooOOOoooooooooooooOOooooOoooooooooOOoOooOooooooooooOoOOOooooooooooOOoooOOoooooooooOOoOOOOoooooooooOOoOOoOooooooooooOoOOOOng" rel="nofollow">https:&#x2F;&#x2F;looooooooooooooooooooooooooooooooooooooooooooooooooo...</a>

Some pages do not require your services (already quite long)<p><a href="https:&#x2F;&#x2F;httpscolonforwardslashforwardslashwwwdotzoltanbalazsdotcom.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;httpscolonforwardslashforwardslashwwwdotzoltanbalazs...</a><p><a href="https:&#x2F;&#x2F;aaaaaaaaaa.org&#x2F;" rel="nofollow">https:&#x2F;&#x2F;aaaaaaaaaa.org&#x2F;</a><p><a href="http:&#x2F;&#x2F;thebestpageintheuniverse.net&#x2F;" rel="nofollow">http:&#x2F;&#x2F;thebestpageintheuniverse.net&#x2F;</a><p><a href="http:&#x2F;&#x2F;bettermotherfuckingwebsite.com&#x2F;" rel="nofollow">http:&#x2F;&#x2F;bettermotherfuckingwebsite.com&#x2F;</a>

<a href="https:&#x2F;&#x2F;loooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo.ong&#x2F;loooooooooOOoOooooooooooooOOOoOoooooooooooOOOoOoooooooooooOOOoooooooooooooOOOooOOooooooooooOOOoOoooooooooooOoOOOOooooooooooOoOOOOoooooooooOOOOooOoooooooooOOOoOoOooooooooooOOoOOOooooooooooOoOOOooooooooooOOoOooOoooooooooOOoOOOoooooooooooOoOOOOng" rel="nofollow">https:&#x2F;&#x2F;looooooooooooooooooooooooooooooooooooooooooooooooooo...</a><p>:D

Being a Chinese entity, is it censored?<p><a href="https:&#x2F;&#x2F;loooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo.ong&#x2F;loooooooooOOoOooooooooooooOOOoOoooooooooooOOOoOoooooooooooOOOoooooooooooooOOOooOOooooooooooOOOoOoooooooooooOoOOOOooooooooooOoOOOOoooooooooOOooOoOoooooooooOOoOOOoooooooooooOoOOOooooooooooOOoOOoOooooooooooOoOOOooooooooooOOOoOOOoooooooooOOoOooOoooooooooOOoOoOOoooooooooOOoOooOoooooooooOOOoooooooooooooOOooOoOoooooooooOOooOoooooooooooOOoOooOoooooooooOOooooOooooooooooOoOOOooooooooooOOoOOOOoooooooooOOOooOooooooooooOOooOOOooooooooooOoOOOOoooooooooOOOoOOOoooooooooOOoOooOoooooooooOOoOoOOoooooooooOOoOooOooooooooooOoOOOOooooooooooOOoooOooooooooooOOOooOooooooooooOOOoooooooooooooOOOooOoooooooooOoOOOOOoooooooooOoOoOoooooooooooOOoOooOoooooooooOOooooOoooooooooOOoOOOooooooooooOOooooOoooooooooOOoOOOooooooooooOOoOOoOoooooooooOOooOoOoooooooooOOoOOOooooooooooOoOOOOOoooooooooOoOooOOoooooooooOOOoooOoooooooooOOOoOoOoooooooooOOooooOoooooooooOOOooOooooooooooOOooOoOoooooooooOoOOOOOoooooooooOOOoooooooooooooOOOooOooooooooooOOoOOOOoooooooooOOOoOoooooooooooOOooOoOoooooooooOOOooOOoooooooooOOOoOoooooooooooOOOooOOoooooooooOoOOOOOoooooooooOOooooOoooooooooOOoOOOooooooooooOOooOoooooooooooOoOOOOOoooooooooOOoOOoOoooooooooOOooooOoooooooooOOOooOOoooooooooOOOooOOoooooooooOOooooOoooooooooOOoooOOoooooooooOOOooOooooooooooOOooOoOng" rel="nofollow">https:&#x2F;&#x2F;looooooooooooooooooooooooooooooooooooooooooooooooooo...</a>

.ong is intended for “organisations non gouvernementale” and the main difference from .org is that proof of actual NGO status is required.

This reminds me of hugeurl, which disappeared around 2014:<p><a href="https:&#x2F;&#x2F;web.archive.org&#x2F;web&#x2F;20140208032349&#x2F;http:&#x2F;&#x2F;hugeurl.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;web.archive.org&#x2F;web&#x2F;20140208032349&#x2F;http:&#x2F;&#x2F;hugeurl.co...</a>

<a href="https:&#x2F;&#x2F;hn.algolia.com&#x2F;?dateRange=all&amp;page=0&amp;prefix=true&amp;query=lengthener&amp;sort=byPopularity&amp;type=story" rel="nofollow">https:&#x2F;&#x2F;hn.algolia.com&#x2F;?dateRange=all&amp;page=0&amp;prefix=true&amp;que...</a>

Interesting technical details on the challenges of using long domain names and HTTPS certificates. The author seems to have found a workaround, though potential abuse is a valid concern. I wonder if there are any plans to address that.

It is possible use &quot;recursion&quot; to create a 20kb long URL, which would be blocked by HN for being too long. Some browsers might not support it though.

We should just use URLs to store our files. Amirightguise?

What about making your URLs super short??<p><a href="https:&#x2F;&#x2F;t.ly&#x2F;" rel="nofollow">https:&#x2F;&#x2F;t.ly&#x2F;</a>

There used to be a URL redirection service called HugeURL. Your URLs were extremely long.

Why would you want to do this? It seems to me like cutting yourself.

Similar to the small web, I equally love the silly web. Good job!

Except for fun maybe, whats the use case of this thing though?

Can’t wait to be abused by scammers and phishing attacks.

Why? Because you can or what&#x27;s the use case?

long → short<p><a href="https:&#x2F;&#x2F;loooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo.ong&#x2F;loooooooooOOoOooooooooooooOOOoOoooooooooooOOOoOoooooooooooOOOoooooooooooooOOOooOOooooooooooOOOoOoooooooooooOoOOOOooooooooooOoOOOOoooooooooOOOOoooooooooooooOoOOOooooooooooOOoooOOoooooooooOOoOOOOoooooooooOOoOOoOooooooooooOoOOOOng" rel="nofollow">https:&#x2F;&#x2F;looooooooooooooooooooooooooooooooooooooooooooooooooo...</a>

URL longerer

This is awesome thanks!

URL too beacoup.

magick.css in the wild - nice!

cool! strong lmgtfy-vibes :D

this is actually really funny

Or: how to ruin hckrnews on mobile (Safari, anyway)

This will be abused. A fun idea that seems harmless until you realize that grifters will use it to obfuscate their grifty payloads.