On: Zulip Server 1.6 released

[donalhunt]

concerns stemmed from the various mentions of everything being in /root which just seems like plain bad security practice.

however a cursory review of the codebase indicates that most of the services run as the zulip user and authentication uses certificates rather than passwords.

[aero31aero → donalhunt]

It might not have been obvious, but for installation, you should use a dedicated machine or virtual machine.

That would mean your concerns regarding /root would be solved automatically.