3 ms·
And this is why you should silo customer domains from internal domains as github did (smartly)!
by junto 12y ago
And this is why you should silo customer domains from internal domains as github did (smartly)!
- jdkanani 12y agoGithub has already faced this issue and homakov[1] pointed that out. [1] https://news.ycombinator.com/user?id=homakov https://news.ycombinator.com/user?id=homakov
- fidz 12y agoI am curious. Could you elaborate on this? Edit: I wonder how Github distinguish their own "internal" email doing.
- rbinv 12y agoWell, this flaw is one example: Slack assumes that someone with an @facebook.com email address must be a Facebook employee. However, Facebook issues @facebook.com email addresses to regular users, too.
- jfroma 12y agoFacebook might have a directory of employees, ldap or something. Too bad slack doesn't support any of this. This is the price they have to pay for reinventing username and password authentication and requiring everyone to register. It is also bad since employees quit or are fired, and you don't want to have to maintain a directory of employees on every application you use. Shameless plug, I work for https://auth0.com https://auth0.com and we make this easier.
- ZoFreX 12y agoIn their defence, Slack does have that as a "coming soon" for their enterprise version.