On: Ted Dziuba's take on Hubot

[weavejester]

Well, (a) he's not suggesting that, and (b) even if he were, it doesn't seem like a huge deal.

If an attacker has access to Hubot, then they already have access to everything the Hubot server can do.

[joshu → weavejester]

If they can TALK to hubot. So whatever the security is on campfire, or whatever it is.

[william42 → joshu]

Campfire's a webapp, so presumably https.