Veil for organisations
People get fooled by someone who claims to work for a project or a company. An organisation card on Veil lets anyone check who its members are, from the accounts they know, and it shows that membership wherever the members appear.
Written on
An organisation’s card#
An organisation has a card of its own at veil.pub/o/<number>, or at a short address you choose, the way Veil’s own card is veil.pub/o/veil. It carries a name, a logo and verified accounts, the way a person’s card does: a domain, a GitHub organisation, a Fediverse account, a Discord server. Every change goes into the public log, and readers check the card in their browser.
You found one from your own card at veil.pub/o/new by giving it a name and, if you like, a logo. You become its first owner. Owners and admins can change the name, the logo and the linked accounts, and invite or remove members. Only an owner can change roles, add or remove other owners, or close the organisation.
Members, signed by both sides#
A membership needs two signatures. The organisation declares the person as a member, and the person accepts with a device key of their own card. Neither side can claim the other alone, so a stranger can’t list themselves as your staff, and you can’t list someone who never agreed.
Once both sides have signed, the member’s name shows your logo beside it, as a small rounded square that links to your card. It appears on their card and in the Veil chat, and the Veil app on Discord names the organisation when it shows their card. Anyone who wonders whether that person really speaks for you opens the logo and sees the list of members, checked against the log.
Badges that follow from the signatures#
Some marks are worked out from what both sides have signed, and nobody hands them out by hand. On Discord, the Veil app gives the Staff role in your linked server only to members whose membership both sides have signed, and it takes the role back when the membership ends. In the Veil chat, a server shows your organisation’s badge only when the server names your organisation and your card lists that server, and the reader’s browser checks the second half against your card.
Official servers#
Your card can name up to five servers in the Veil chat as your official ones. The list is part of your signed card, so a copycat server with your name and logo gets no badge. A Discord server works in a similar way. A server admin runs /veil server link with your organisation, and one of your owners confirms it from your card. The server then shows on your card as a verified link.
Sign in with Veil for your own tools#
If you run a website or an internal tool, Sign in with Veil lets people log in with their card through OpenID Connect. With the right scope, your app learns which organisations the person belongs to, counting only memberships accepted by both sides. That is enough to open a staff area to your members without a separate list of passwords.
Questions#
Does an organisation have its own keys?
No. An organisation card is signed by its owners and admins, each with a device key of their own card. That way a person who leaves takes no key of the organisation with them.
Can someone found an organisation with our name?
Names are labels and two cards can share one, as in a phone book. What proves an organisation card is yours are its verified accounts, such as your domain and your GitHub organisation. A card that uses a name to deceive is removed for impersonation.
What happens when a member leaves?
An owner or admin removes them, or they leave from their own card. The logo disappears from their name, the Discord Staff role is taken back at the next daily check, and the change stays in the log.
Does it cost anything?
No. Founding an organisation and adding members are free. A card can found up to three organisations a day.