#tantekwell, from having seen both rude/argumentative/trolling comments others' personal sites (e.g. Eric Meyer), and having had to filter / block comments from negative / trolling folks on content I've sharecropped various places (e.g. Google+), I'm not sure I would want a comment system on my own site that allowed comments from people I don't know.
#tantekon my own site, I want to curate a much higher level of discussion
#aaronpkmaybe it's not even worth pursing something analogous to the current commenting system, and instead just re-thinking discussion online
#tanteksomehow it's more ok that on my posts on Google+ there are sometimes semi-crazy type folks who take extra energy to deal with (and eventually turn positive, or have to block)
#tantekI just don't want to feel any sense of maintaining space/permalinks for any negative people on my own domain, even for historical reasons
#aaronpklately my sites have been getting a lot of spam comments (pretty neutral text comments with a link to their site) that I'd really don't even want to deal with
#tantekI'm basically leaning towards white-list only for comments that I'd host on my own domain
#tantekthere's a case to be made to be even more exclusive with who you allow to comment on your personal domain
#aaronpkI want two things: I want to keep my own comments I leave on other peoples' sites, and I want to keep others' comments on my sites.
#aaronpkDisqus is an interesting start in that direction because I can log in to my account and see all comments I've left across the internet
#tantekironically enough, one place to look for analogies to this kind of social challenge is the permissions model on people's Facebook walls
#tantekyeah those are definitely two distinct but related things.
#aaronpkalso ironic is the fact that I've started to replace my comment forms with facebook comment boxes for two reasons: combating spam, and getting the publication to facebook feeds built in
#tantekkeeping your own comments that you leave on other peoples' sites is the easier problem to solve, socially and technically
#aaronpkI also find that I get more feedback when there's a facebook comment box than a regular comment box. (haven't tried disqus yet)
#tantekthe thing is, with a whitelist-only permissions model, spam isn't ever a problem
#tantekso I think you may be solving the problem from the wrong end, starting *too* open and trying to limit it, rather than starting with commenting on your site as a privilege that is earned
#aaronpkI think I would be comfortable with any of my facebook or twitter friends commenting on my site. That's a whitelist, but unfortunately the list is not my own.
#tantekthose are both good for bootstrapping a personal whitelist yes
#tantekhere's another thought experiment - if you could give people the ability to make "editorial" changes on your primary content, how would you decide who to give those abilities to?
#aaronpkthat's a curious idea... that gets much more complicated because I suspect there would be different groups of people depending on the content
#tantekwould there? don't you think you could trust them in general to self-limit based on the content?
#tantekFederated wiki would allow for discovery of people that you might whitelist
#aaronpksee content online, fork to your own site, send a pull request. yea, better for un-whitelisted people
#tantekbut however you do discovery, you're still going to have to figure out a decision-making methodology for who you let edit directly
#tantekperhaps not unlike who you add as "contributors" to your projects on github
#tantekbut instead of "projects", have it be your content, and instead of on github, have it be on your site
#aaronpkCurrently my main site (http://aaronparecki.com) is editable to anybody I follow on Twitter. Since it's a wiki and keeps good changelogs, I trust my friends to not make destructive edits.
#tantekthe reason I bring up this thought experiment is that I think it is a simpler form of the "who should I whitelist to allow comments" problem.
#aaronpkI'd like to find an "indie" replacement to that method, but there are two challenges I see.
#aaronpkOne being the user interface for me to add people to the whitelist, and two being the way they authenticate.
#aaronpkOpenID would be one way if it weren't so confusing to set up and very underutilized, but there's still the UI problem for me to add people's domains.
#tantekI'd say RelMeAuth is a good first step towards OpenID-like support
#tantekplus with RelMeAuth you could hook it up to your existing Twitter following checklist
#tanteki.e. no reason for me to sign-in with Twitter. I could sign-in with tantek.com and via RelMeAuth it would end up using my Twitter to auth me as tantek.com, which you would then also be able to check to see if you're following me.
#aaronpkI'd still have to implement Twitter (and other service) logins to support RelMeAuth, right?
#tantekthat would be a nice incremental step towards an OpenID-like experience without having to first code up a UI for whitelisting people's domains - you could do that later
#tantekyou've already implemented Twitter sign-in - that's my point
#tantekRelMeAuth would give your friends a personal URL abstraction on top of that
#tantekhowever the challenge before that is what to replace the [ Sign in with Twitter ] button with
#aaronpkideally it would just be a [ Sign in ] button, but there's a lot of work to do before that's possible
#tantekI've been considering trying a simple button like: [ Web sign-in ]
#tantekso that it communicates a bit of an expectation before you click it
#tantekpeople are used to a normal/plain [ Sign in ] button requiring a site-specific login, email etc. and that if they don't think they already have an account there, they don't bother clicking it.
#tantekwhereas with a [ Sign in with Twitter ] button, they are already given an expectation that if they have a Twitter, they might be able to do something
#tantekI don't have a perfect answer for this yet, but I do think a [ Web sign-in ] button is a decent first best guess
#tanteksomething upon which we can perform user studies, get feedback etc.
#tantekwe could probably do better than that for a first cut short paragraph description :)
#tantekaaronpk, does "web sign-in" sound like a reasonable user-facing working name for this feature?
#aaronpkyes I think so. it's unique enough to cause people to consider what it is before turning it away assuming as username/password login, but generic enough that it doesn't brand itself horribly (like RelMeAuth or iAuth would do)
#tantekok finally wrote up a better first cut at a short paragraph (and a few more) to link to for a brief hopefully user-friendly explanation of web sign-in