Editors need a way to determine whether they are talking to an official TS Server

Otherwise, they will obliviously forward events from the server to our official telemetry system and we'll have confusing noise in our data (e.g. stacks that don't match our source or asserts that don't exist).

The most secure approach would be to cryptographically hash the official tsserver.js and have the editor only report telemetry for matching files. This would likely be impractical for, e.g., nightly builds. Edit: @minestarks pointed out that signing the files would be a smarter way to do this - no need for a big inclusion list.

An intermediate approach would be to only report telemetry from the in-box implementation (i.e. not if tsserver comes from npm or nuget). We might lose a lot of data.

Alternatively, our publication process could modify tsserver.js in some way that the editor could detect. A fork would have to be deliberately malicious to replicate the change (vs now, where they'd have to explicitly suppress events to be good citizens).

Comienza con tsserver.js y el proceso de publicación; el issue no menciona pruebas específicas ni otros puntos de entrada. Compara los mecanismos de identidad propuestos y determina cómo un editor puede reconocer de forma fiable los servidores oficiales antes de reenviar la telemetría, incluidas las distribuciones nightly o npm/nuget. El trabajo estará terminado cuando la telemetría solo se reporte para servidores verificablemente oficiales.