

Gitter – Chat, for GitHub - ejdyksen
https://gitter.im/

======
rileytg
Looks really nice but you guys ask for too many permissions! SSH keys??
[http://cl.ly/U1pP](http://cl.ly/U1pP)

~~~
mydigitalself
Hey,

I've answered this numerous times in this thread, but I'll say it again, very
loudly and very definitively: WE DO NOT WRITE TO YOUR SSH KEYS, EVER. EVER.
EVER. We don't even read them.

Unfortunately, as beautiful as GitHub's API is, they've got their scopes for
permissions completely wrong and we know they are working to fix this.

Short answer: [https://gitter.zendesk.com/hc/en-
us/articles/200178961-Why-d...](https://gitter.zendesk.com/hc/en-
us/articles/200178961-Why-do-you-ask-for-write-access-to-my-profile)

Long answer: [https://gitter.zendesk.com/hc/en-
us/articles/200176672-Authe...](https://gitter.zendesk.com/hc/en-
us/articles/200176672-Authenticating-with-GitHub)

Mike

~~~
mdcatlin
I see your explanation in
[https://gitter.im/login/explain](https://gitter.im/login/explain) and it
suggests a business solution that doesn't require me to believe the promises
of someone I don't yet trust.

"In order to create a good first-time user experience that allows people to
create and join chat rooms for public repositories and organisations... [the
rest of the technical explanation]".

Stop doing this.

Make this feature optional. I don't even want a public chat room for my
company's private repo.

~~~
mydigitalself
It has nothing to do with your company's private repo, it has to do with
getting a list of ORGS you belong to.

In fact chats for private repos is a completely separate matter and we allow
users to upgrade their access to GitHub's repo scope if they want access to
private repos.

Otherwise we'd have to do: * signup (only public repos) * upgrade permissions
-> org chats * upgrade permissions -> repo chats

And so then users need to understand three levels of permissions and scope and
I don't want to burden people with that level of cognitive overload. It's hard
enough to explain to people that they need to elevate privileges to get
private repo access.

Whilst a few people share your view, we've had nearly 10,000 grant us this
access in a very short space of time and so it's not massively affecting our
product right now and we have confidence in the future that GitHub will change
their permissions and introduce a read-only permission that we will then
switch to.

------
mydigitalself
Hey, thanks for posting. Mike here from Gitter.

I know a lot of this audience are pretty bullish on IRC and so we're also busy
testing an IRC bridge for Gitter. Once you've signed up, feel free to go to
[https://irc.gitter.im](https://irc.gitter.im) and give it a whirl.

Feel free to leave any feedback on Gitter here or get in touch with us via our
chat room:
[https://gitter.im/gitterHQ/gitter](https://gitter.im/gitterHQ/gitter) or
[http://support.gitter.im](http://support.gitter.im)

~~~
coherentpony
Mike? Why did you have to change you name? _He 's_ the one who sucks!

------
mikexstudios
This is really cool, but is there a reason why the authorization permissions
requires r/w access to: Private email addresses, and SSH keys?

~~~
mydigitalself
Hey Mike,

We don't ever write anything to your profile. As explained in the link below,
this is a standard GitHub permission.

PS your SSH keys are 100% public:
[https://api.github.com/users/mikexstudios/keys](https://api.github.com/users/mikexstudios/keys)

Mike

Short answer: [https://gitter.zendesk.com/hc/en-
us/articles/200178961-Why-d...](https://gitter.zendesk.com/hc/en-
us/articles/200178961-Why-do-you-ask-for-write-access-to-my-profile-)

Long answer: [https://gitter.zendesk.com/hc/en-
us/articles/200176672-Authe...](https://gitter.zendesk.com/hc/en-
us/articles/200176672-Authenticating-with-GitHub)

~~~
misterdai
Any idea if GitHub will ever alter the way that works so you can avoid it
giving you write access. I was all ready to give Gitter a go until I saw the
permissions that would be granted. Sure you're trust worthy but us IT types
can be paranoid ;-)

~~~
suprememoocow
Hi, this is Andrew from Gitter.

And we completely understand. We're waiting on Github to update their OAuth
scopes, and we understand that they're working on it.

If you're not comfortable with the OAuth permissions Gitter requires, you
could try Gitter's sister product, Troupe [https://trou.pe](https://trou.pe).
It's got most of the same features, but with less Github integration and no
markdown or syntax highlighting.

------
imjared
Pretty cool but I can't see having another chat client on top of Hipchat. Wish
there was some way to bake this into Hipchat since the features look awesome.
Great work!

~~~
mydigitalself
Thanks! We've got a few people migrating from Campfire and Hipchat to us... :)

------
sunkarapk
I have been using this since the beginning for my open source project
[https://github.com/pksunkara/alpaca](https://github.com/pksunkara/alpaca).
They provide very good support. And the features are awesome.

Short story, Gitter is awesome!

[https://gitter.im/pksunkara/alpaca](https://gitter.im/pksunkara/alpaca)

~~~
suprememoocow
Thanks for all the brilliant support Pavan!

In fact, Gitter uses Pavan's excellent Octonode library
([https://github.com/pksunkara/octonode](https://github.com/pksunkara/octonode))
for all it's communications with Github.

------
dangoor
We've been testing it for Brackets:

[https://gitter.im/adobe/brackets](https://gitter.im/adobe/brackets)

It's a really cool service and I think one of the big considerations for us
right now is that our freenode channel (#brackets) has 86 people in it as I
type this. We've potentially got some inertia to overcome.

------
mariocesar
Awesome :)

I just integrated with sorl-thumbnail, I don't know if it will be a fully
replacement for our IRC channel, however I'm sure most of the devs will give
it a try.

Gitter Room: [https://gitter.im/mariocesar/sorl-
thumbnail](https://gitter.im/mariocesar/sorl-thumbnail)

~~~
mydigitalself
Feel free to give our IRC bridge a go to. It's very new and still very much in
test phase.

[https://irc.gitter.im](https://irc.gitter.im)

Let us know you get along with it:
[https://gitter.im/gitterHQ/gitter](https://gitter.im/gitterHQ/gitter)
[http://support.gitter.im](http://support.gitter.im)

Mike

------
joeblau
Could you guys add the Webpage Icons[1]?

[1] -
[https://developer.apple.com/library/ios/documentation/AppleA...](https://developer.apple.com/library/ios/documentation/AppleApplications/Reference/SafariWebContent/ConfiguringWebApplications/ConfiguringWebApplications.html)

~~~
mydigitalself
Great request, will certainly look into it. We'll also have an iOS app out
soon.

~~~
joeblau
That was going to be my original question until I actually used my _reading_
skills.

------
namuol
Reminds me a lot of Slack[1], but the gh-flavored-markdown and tighter issue
and CI integration make Gitter stand out.

Any chance of BitBucket integration?

[1] ([http://slack.com/](http://slack.com/))

~~~
mydigitalself
BitBucket is coming soon! Follow us on twitter for updates (@gitchat)

------
yssrn
Is there a privacy policy or ToS? I don't see one on the site.

------
jbranchaud
It looks great, I'd love to try it, but I am not comfortable with how many
permissions it requires on my Github account.

~~~
mydigitalself
Hey,

We don't use those permissions, unfortunately as good as GitHub's API is,
their scopes are very limited.

short answer: [https://gitter.zendesk.com/hc/en-
us/articles/200178961-Why-d...](https://gitter.zendesk.com/hc/en-
us/articles/200178961-Why-do-you-ask-for-write-access-to-my-profile)

long answer: [https://gitter.zendesk.com/hc/en-
us/articles/200176672-Authe...](https://gitter.zendesk.com/hc/en-
us/articles/200176672-Authenticating-with-GitHub)

~~~
mynameisfiber
Maybe a good solution would be to request a less privileged token if the user
doesn't want integration with private repos. Then, if they want to upgrade to
integration with private repos they need to get a new oauth token with the
relevant privileges.

I'd love to try this service out, but I also don't want to hand out oauth
tokens that can read my ssh keys.

EDIT: Just read more comments and saw that my github ssh keys are completely
public. I guess that makes sense since they are public keys!

------
hartator
How do this compare to HipChat? Seems interesting.

------
twir
Where's the privacy policy?

