4 ms·
In general this is a good idea. But in the case of Microsoft--good luck figuring out which of Microsoft's thousands of domains are legit! :)
by yrro 5y ago
In general this is a good idea. But in the case of Microsoft--good luck figuring out which of Microsoft's thousands of domains are legit! :)
- koheripbal 5y agoIt would seem to me that Microsoft would choose to link it to microsoft.com so that customers can easily recognize its authenticity.
- yrro 5y agoThey have already failed this test: they are already publishing extensions using msftliveapps@gmail.com and msandapp.bgcextn@gmail.com, doubtless many others!
- evilsnoopi3 5y agoI believe Google requires you publish Chrome extensions with an @gmail address, in which case MS doesn’t really have a choice.
- yrro 5y agoGood grief--that is so evil (not to mention anticompetitive) that I didn't even consider it!
- deleted 5y ago[deleted]
- Godel_unicode 5y agoNot sure what would make using a Gmail account anticompetitive, but it's also not true. You need a chrome web store account (which they amusingly encourage you not to use your personal email for) which can use any email address.
- criddell 5y agoAny idea what problem Google is solving by requiring the use of gmail?
- electroly 5y agoAbsolutely untrue, as mentioned elsewhere in the thread. I have Chrome extensions published under a non-gmail email address.
- dragonwriter 5y agoMicrosoft might, I suppose, have a policy against microsoft.com accounts on other firms infrastructure, and therefore if it needs a Google account uses gmail or other non-microsoft.com domains.
- formerly_proven 5y agoReminds me of Paypal where I'm simply unable to tell whether some mails from them were phishing or not (regardless of time spent investigating these mails), and I believe that virtually no one would be able to tell.
- ComputerGuru 5y agoThey were even cognizant of the issue to the point where they set up a robo inbox you could forward any suspected phishing emails to and it would reply telling you if it was legit or not. It was something like phishing@paypal.com
- rocqua 5y agoIt still frustrates me that legitimate Paypal e-mails include really big "click here to login" buttons that link you to their website. Such links are considered a hallmark of phishing, and there are many attempts to prevent people from clicking on such links. Many services I use include text like 'we will never send you such a link you know how to get to our website'. The fact that paypal does not do this normalizes clicking on links in e-mails.
- gowld 5y ago"use email for notifications, but don't trust email content" is not a solution for most users. If you can't trust email, why even have it? Install a secure app and leave email behind, or make email secure by having clients clearly display cryptographically secured provenance info, and flag unknown/untrusted senders.
- rocqua 5y agoThere is no alternative to e-mail. Except perhaps for SMS. There is no other method for contacting people that is anywhere near as pervasive. It also has the advantage of being federated, not controlled by any specific entity. Besides that, compared to WhatsApp and signal, email is generally for longer and less urgent messages. Those fit notifications much better. In that context an email saying "hey this is whats up, login as you normally do if you want to verify or act accordingly". It's far from ideal. We will probably come to some form of solution at some point. But at this moment it is a clear no-brainer.