slack-edge.com

Slack-edge.com is a subdomain of Slack, the popular business communication platform. Recently, Slack has sent an email to its customers who are Owners or Primary Owners of a Slack instance, asking them to update their ISRG root certificates. The email aims to ensure that Slack continues to function correctly within their customers’ network environment.

The email asks the customers to work with their network or IT team to ensure that a new root certificate is installed in their infrastructure for slack-edge.com. The customers need to ensure that the “ISRG Root X1” certificate from Let's Encrypt is installed and trusted, which can be downloaded from Let's Encrypt’s website. Slack also advises its customers to ensure that their clients connecting to Slack have this certificate installed.

Slack has received several reports from customers who have received this email and is confirming that the email is legitimately sent by Slack. ISRG Root X1 is trusted in many root stores, so updating to a current version of the operating system or firmware may suffice for resolving this issue. To quickly test whether or not the customer needs to take any further action, the customer can try accessing slack.com in their browser. If they can access the site, then no further action is needed.

The customers who need to manually update their trusted root certificates can download them from Let's Encrypt’s website. However, Slack generally does not encourage people to manually add trusted root certificates because this process can be error-prone.

The purpose of updating the root certificates is to ensure that Slack continues to function properly in the coming months. Slack has not explicitly stated why updating the certificates is necessary, but some users have speculated that it may be related to Let’s Encrypt’s short-chain transition.

One user on the Let’s Encrypt Community Support forum pointed out that Slack may be attempting to use a short chain. The long chain expires on October 1st, 2024, so it makes sense for Slack to prepare for this transition. However, another user pointed out that there is no evidence that Slack is choosing the short chain.

Overall, Slack’s email requesting its customers to update their ISRG root certificates appears to be a proactive measure to ensure that Slack continues to function correctly within its customers’ network environment. Slack is encouraging its customers to work with their network or IT team to ensure that the new root certificate is installed and trusted, and that their clients connecting to Slack have this certificate installed. While updating the trusted root certificates manually is possible, Slack generally does not encourage it because it can be error-prone.

In conclusion, Slack-edge.com, a subdomain of Slack, is requesting its customers to update their ISRG root certificates to ensure that Slack continues to function properly in the coming months. Customers who need to manually update their trusted root certificates can download them from Let's Encrypt’s website, but Slack generally does not encourage people to manually add trusted root certificates because this process can be error-prone. While it is unclear why updating the certificates is necessary, it appears to be a proactive measure taken by Slack.