Good defense and I agree, but I also agree that the SSO tax sucks.
Not a day goes by that I don't dedicate some thought to better business models for software and services, especially for FOSS and otherwise pro-freedom pro-user software. It's hard for many reasons. User-hostile software (surveillance, loot box games, cryptocurrency scams) is easy to make money from, but that's not my thing.
Re:ZeroTier Business SSO
by simonjgreen on Friday June 10, 2022 @02:43AM
(#31690844)
For me it's a bit like how first class passengers cover the cost of the flight for all the economy class passengers.
And I 100% agree with you. As good security practice SSO should be available for all but the reasoning makes sense
https://news.ycombinator.com/item?id=29892664
Long story short: it has almost nothing to do with the cost of providing SSO features (which is what upsets security nerds, because we know it's not that expensive to get these features right, though they are tricky).
Rather: the SSO tax is much more about making services cheap/free for small customers, and charging "what they're really worth" (the core service! the whole thing! not just the SSO feature!) to companies that demonstrate that they're large enough by demanding SSO.
You don't have to like it! I sure don't! We SSO everything and are relatively small and the tax takes a bite. But it's at least worth understanding the logic behind it.