It makes sense that they're making a huge amount of noise about this, because "this doesn't look like the right login page" is otherwise an extremely valid reaction that should be encouraged.
and yet, they announce a change to the login screen from a domain of workspaceupdates.googleblog.com
If I was unaware of the change, and somebody sent me a link, and I wanted more information about the change, and got sent a link to workspaceupdates.googleblog.com (without already knowing of it) I would think its a sophisticated phishing attempt. A corporation like google should really be pushing human trust through exclusive use of .google or .google.com
This is just their changelog page essentially, where every Workspace update is documented, no matter how large or small. The intended audience is Workspace admins.
On the other hand, why this trivial change is being upvoted here on HN as interesting news is totally baffling to me.
