5 ms·
It links a great deal to Github on its homepage, yet none of the Github links mention it or link back to it. My first impression was that someone was trying to
by always_good 9y ago
It links a great deal to Github on its homepage, yet none of the Github links mention it or link back to it. My first impression was that someone was trying to bootstrap a forum by looking to look official.
I suppose it's just not launched yet. Else you'd at least expect a blog post.
- chrismorgan 9y agoThe registrant details in the whois are GitHub’s, and the name servers match. Seems likely to be genuine.
- oneeyedpigeon 9y agoI hope so, clicking on 'sign in' logged me into my github account with no further action. Does anyone know how they did that?
- breakingcups 9y agoYou're probably already logged in on the main Github.com domain. You were redirected from the community domain to the main domain to log in. Once there, the system saw you were already logged in and redirected you back to the community site with some proper tokens in the url to identify you.
- oneeyedpigeon 9y agoBut they're different domains; how are they identifying me as a client?
- kroltan 9y agogithub.community isn't. It sends you to github.com regardless, since their login is there. github.com sees you're already logged in, and redirects back, passing auth.
- chrismorgan 9y agoThat suggests it’s bypassing OAuth—with OAuth you’d get a “GitHub Community wants access to X, Y and Z” interstitial.
- Crespyl 9y agoUnless it's by the same authors as GitHub, and has access to the same OAuth client id/secrets as the master GitHub app.
- jon-wood 9y agoMost OAuth providers have a flag for first party clients which allows them to bypass the usual authorization dance and just bounce you straight back to the origin.
- Cthulhu_ 9y agoI think they'd launch it on one of the upcoming Constellation events, given how that's pretty prominent on the home page.