@SlackHQ App configurations include the URL endpoints they use. You should let users installing apps know what those endpoints are so the users know exactly where their data is going. It will help them make an informed security decision.
-
Yes, I know that. I’m saying y’all should let users know the endpoints the apps uses. An app developer may not disclose all of the endpoints but y’all know all of them cause you need to for the apps to work.
We run a number of tests on app endpoints during our review. We don’t host developer code, so we recommend reaching out to the developer for more details on their security practices.We hear you. Thank you for your thoughts on this! We'll take this feedback onboard. 