4 ms·
I love Zulip and wish it the best. But this comment on the zuplipchat web site https://zulipchat.com/security/ https://zulipchat.com/security/ feels like a pre
by abraae 8y ago
I love Zulip and wish it the best.
But this comment on the zuplipchat web site https://zulipchat.com/security/ https://zulipchat.com/security/ feels like a pretty gross generalisation and detracts from Zulip's vibe IMO:
> With many SaaS providers, essentially all engineers have direct shell access to production servers storing user data. Zulip Cloud is different: only a small handful of security-trained engineers have access to production servers or to sensitive customer data.
- tabbott 8y agoYikes, I'm not sure how "essentially all" ever got in there; it should have been "the majority of". And even with that edit, our practice is, where possible, to cite sources, and while there's a lot of anecdotal data on this topic, there aren't great published sources for this topic. So whether or not it's shockingly common for companies to have dozens or hundreds of people with shell access to production, we've removed the commentary on what other organizations do here, and just explain our practices. I really appreciate the feedback!