EVE General Discussion

If you give away full API they read your mails and transactions etc. Go ahead...

But is it standard practice?
Would you do it if you wanted to join a new corp?

I feel like I'm alright with everything except Mail.. having Mail in there seems unnecessary and perhaps invasive.

Once gain, someone tries to suggest on the forums that full API requirement is actually standard practice.

I don't think full API is useful because people can always buy a new account... oh wait, it is useful, nvm.

Full API is standard and has been for years. if you had corps before that didnt require it its no wonder they aint around now.

A lot do it because someone told them it will keep out spies. Anyone not prepared to explain exactly what part of your API they actually need to check and why they need to check it doesn't actually understand what they are looking at anyway and is only asking because someone told them they should check Full API's.

Its something I refuse to give out, I'll give a partial to a corp that can justify the bits they want to see, as some bits are fair to look at, but demanding a full and not explaining what bits they actually need to see is a mark of a bad recruiter.

It's standard practice for corps that are worth joining. Any group that's sufficiently organized and with sufficient infrastructure at stake has overwhelming incentive to do a full API comb, and keep a permanent full API on hand, including reading your evemails.

Invasive? Absolutely. Degrading? For the recruiter/security guy as well as the applicant. Un-fun? Boy howdy. Not entirely effective, even with a thorough check? Fraid so.

And with all the downsides combined, it's still worthwhile to require the full API.... If you stand to lose enough, that is. Some corps and alliances are at higher risk from spies, saboteurs and awoxers. These are typically the more powerful groups, who inevitably have enemies that are willing to dedicate a subscription simply to gathering your intel, or waiting for a moment to exploit, burning the spy.

By requiring the full API, you make it a bit less easy for opponents to infiltrate you. Having only a few spies in your ranks is a lot better than having a bunch of spies.

The paranoia sucks - the security check sucks - the lack of privacy sucks - the newbie unfriendliness sucks - the extra layer of bureaucracy sucks - the extra work sucks.
Yet, all of that sucks less than what spies can potentially afflict on a competitive alliance.

Full API is standard for alliances that matter. No API, no recruit.

Except nowhere in there did you actually explain a single thing about how a FULL API rather than a partial actually changes anything. Nor what bits actually help you in checking for spies or running a corp. You just trotted out the old passed down and horribly flawed argument.

My primary concern is that giving Full API will give people information to exploit me or somehow make my life miserable.

If it is very unlikely to happen, then I don't mind giving it.

The API page did warn me about giving this information, so I am just wary by default.

lol