New issue
Advanced search Search tips

Issue 594664 link

Starred by 3 users

Issue metadata

Status: Assigned
Owner:
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 2
Type: Feature



Sign in to add a comment

[FR] Display company name instead of domain name

Project Member Reported by jgodinez@chromium.org, Mar 14 2016

Issue description

Description:
Display company name instead of domain name

Use case:
A device policy could be implemented to allow users to decide if they want to display their domain name or a different text such as the company name. For example, instead of saying "This device is managed by domain.com" our customers could customize it and display "This device is managed by Domain Company".

Motivation:
 In managed Chrome devices, there are multiple sections where the text "This device is managed by" will display the domain name and this can't be customized. For example, the Chromebox interface renders the domain name on screen where it could refer to the company name in order to be legally binding/valid. Specifically, in the Terms and Conditions file that can be set it will refer to the domain name as if the domain name was a legal entity capable of establishing Terms of Service. A domain name cannot establish or enforce such Term, only a formal legal entity (such as a person or a company) has such rights/authority. 

Existing workarounds:
no workarounds 

 
Owner: dskaram@chromium.org
Assigned to David for prioritization.
Cc: jackychen@chromium.org
This is a choice by security. A display name is spoofable e.g. "Managed by Google" when your URL is "evil.com".

I don't see any precedents where we relaxed this stance and I don't think we can do that. If there is a legal motivation to it, we'll have to discuss this with our legal team. +Jack for advice.
Cc: -jackychen@chromium.org jlc...@google.com
I propose that it is not spoofable if the only value that can be used is from the "company name" field (which was entered during the creation of the account  by Google or their authorized affiliate).

Comment 5 by djeche@chromium.org, Jul 18 2016

This does not seem like a bad idea though don't you think... 

If this is visible instead on the domain name on the user system it might look pretty cool. I fail however to understand how why a domain name is not as strong as company. 

I guess this would be the legal reason for this change to take place.

"A domain name cannot establish or enforce such Term, only a formal legal entity (such as a person or a company) has such rights/authority."

Comment 6 by oreinosa@google.com, Jul 26 2016

Is there an update about this feature request? 
Status: Assigned (was: Untriaged)
Owner: marcuskoehler@chromium.org

Sign in to add a comment