#indiewebcamp 2013-09-16

2013-09-16 UTC
pfenwick, jgraham909, habitmelon and melvster joined the channel
#
@justagwailo IndieAuth now supports OpenID delegation http://aaronparecki.com/articles/2013/09/15/1/indieauth-now-supports-openid-delegation (twitter.com/_/status/379401268542078976)
#
@t Why web protocols should just use HTTP+params and no XML-RPC: Use a <form> to test: http://gist.github.com/adactio/6575229 #webmention (ttk.me t4S32) (twitter.com/_/status/379401984115482625)
#
@ShaneHudson RT @t: Why web protocols should just use HTTP+params and no XML-RPC: Use a <form> to test: http://gist.github.com/adactio/6575229 #webmention (ttk.me t4S32) (twitter.com/_/status/379402113228746753)
#
@cgiffard RT @t: Why web protocols should just use HTTP+params and no XML-RPC: Use a <form> to test: http://gist.github.com/adactio/6575229 #webmention (ttk.me t4S32) (twitter.com/_/status/379402196103622657)
#
tantek ooh - is Loqi watching for mentions of webmention?
#
ShaneHudson very met
#
ShaneHudson meta
#
tantek Adactio's idea, implementation, and code have clearly demonstrated *why* using "just HTTP" has a very concrete benefit
#
ShaneHudson Yep! And it is probably the shortest implementation of all
#
tantek and why using XML-RPC, especially for *simple* things, was a huge complexity mistake
#
tantek if you can't test your web protocol with a web form without javascript, you're doing it wrong.
#
tommorris to be fair, way back when, XML-RPC seemed like the only way.
#
tantek.com edited /OpenID (+17) "/* Setup */ put delegate first, and use "yoursite.example.com" to more clearly indicate it's where your personal URL goes" (view diff)
#
tommorris the world had had collective amnesia about how the web and HTTP worked and was coming up with crazy reinventions thereof
#
tantek tommorris - "XML-RPC seemed like the only way" - XML was proselytized as "the only way" as religions commonly are.
#
tantek tommorris - why did no one (like TimBL or IETF folks that worked on HTTP) speak-up and point out that XML-RPC had no clothes?
#
tantek or did they speak-up and get summarily ignored by the corporate XML hordes?
#
tommorris and XML-RPC was blissfully simple compared to SOAP and the ever more complex rabbits nest of WS-*
#
tantek ah right that
#
tommorris well, XML-RPC wasn't really corporate, it was Dave Winer
#
tommorris he then took it to Microsoft who then used it to bootstrap SOAP and WS-*
#
ShaneHudson I never got involved with XML-RPC.. used it only once, for something Wordpress related lol
smus joined the channel
#
tommorris there's some truly mad shit with XML-RPC though. MetaWeblog API sending passwords in XML-RPC in the clear.
#
tommorris No. Just no.
#
tommorris One of the reasons I haven't implemented Metaweblog on my site
#
tantek tommorris - indeed
#
tantek I think that's why metaweblog died
#
tantek as a "standard" API
#
tantek and then all the silos switched to proprietary API endpoints for posting
#
tantek and API standardization took a step backwards
#
tommorris I think MetaWeblog also chokes on blogs without titles.
#
aaronpk tantek: I don't like the "yoursite.example.com" example because it suggests a subdomain of something is needed
#
aaronpk i'll change to "yoursite.com"
#
tantek aaronpk - yeah it's a tradeoff
#
tommorris The amount of time I kept telling people "I want to be able to post things without titles" and was told patronizingly "nobody wants to do that, that's crazy"
#
tantek aaronpk, except yoursite.com *is* a site
#
tantek that's the problem
#
aaronpk that's why example.com exists :/
#
tantek sure, but people don't think of their site as "example.com"
#
aaronpk example.me?
#
tantek did w3c register that?
#
ShaneHudson xD
#
tommorris now there are about 500 million posts made every day without titles to a little site called Twitter.
#
aaronpk i can just put aaronparecki.com in there
#
tantek tommorris - the original Blogger had no "Title" input field.
#
tantek Ev has blogged about this
#
ShaneHudson tantek: Really? I never used Blogger.. but I don't remember seeing blogs without titles!
#
tantek very early
#
aaronparecki.com edited /OpenID (+24) "attempt to clarify openid delegate example" (view diff)
#
aaronpk tantek: how about that? alternately could use "aaronparecki.com" in the example. I removed multiple references to the domain with english text instead
#
tantek I think I prefer "aaronparecki.com"
#
tantek since that's more obviously a personal site
#
tantek and it's obvious enough that it's someone personal domain that they should replace
#
aaronpk it does make it more obvious that way yea
#
tantek whereas example.me looks like odd boilerplate
#
aaronparecki.com edited /OpenID (+12) "use explicit personal domain in the example" (view diff)
#
aaronpk heh we already had used "aaronparecki.com" in the etherpad doc http://indiewebcamp.com/events/2013-09-15-pdx-indieauth-openid-hackathon#Minimum_Implementation
#
tantek.com edited /OpenID (+17) "/* List of notable websites that consume OpenID */ shorten the heading for easier linking, move longer summary to prose" (view diff)
#
tantek.com edited /IndieAuth (+187) "/* How to use IndieAuth as an OpenID Delegate */ put delegate first, update from OpenID instructions" (view diff)
#
aaronpk tommorris: lol! http://tommorris.org/posts/170
#
tantek tommorris is on a roll
#
aaronpk that was from 2008. he's been on a roll for a long time
#
tantek realizes the dates on those posts
#
tantek :)
#
tantek I think those are his imported tweets
#
ShaneHudson Could someone add me to the github organisation please? (Mostly just because I'm not in any, so would look good on my profile :P )
#
tantek note that the "syndicated to" links are broken
#
tommorris Yes, a lot of those are imported from Twitter. but some are imported from pre-Twitter
#
aaronpk ShaneHudson: lol sure
#
tantek tommorris - the links to Twitter are broken on some
#
tantek e.g. http://tommorris.org/posts/170
#
tantek.com edited /OpenID (+47) "/* Setup */ note inside the head element explicitly" (view diff)
#
aaronpk uh what's your github profile ShaneHudson
#
aaronpk oh just shanehudson
#
tommorris will run a script through to see which ones are broken.
#
ShaneHudson https://github.com/ShaneHudson
#
tantek all the early ones I clicked on ~ 2008
#
ShaneHudson Yup, almost all of my usernames are my full name. Sometimes just my first name. Never stuck with any aliases or anything
#
aaronpk ShaneHudson: huh, it doesn't give me an option to "publicize membership" for you
#
tommorris files an issue for himself
#
ShaneHudson hmm odd, no worries then
#
ShaneHudson Ah it did work, thanks :)
habitmelon joined the channel
#
ShaneHudson Ugh. Currently writing a chapter on webrtc and need to explain ICE/STUN/TURN etc. So hard to do without it being boring!
#
tantek.com edited /IndieAuth (-13) "group How To, shorten headings for better/easier linking" (view diff)
#
tantek.com edited /IndieAuth (+34) "add TOC to make it easier to click on section links and thus get (semi) permalinks to specific sections" (view diff)
#
@t switched my #OpenID from #myOpenID to #IndieAuth. You should too: http://indiewebcamp.com/IndieAuth#Use_IndieAuth_for_your_OpenID Nice job @aaronpk: http://tantek.com/2013/258/t3/switch-openid-delegate-myopenid-indieauth (twitter.com/_/status/379412376782508032)
#
tantek aaronpk - do you articles support displaying webmentions
#
tantek ?
#
tantek just tried sending your openid indieauth article, got a 202 back, but didn't show up on the site.
#
tantek er, post
#
tantek also - might as well update http://aaronparecki.com/articles/2013/09/15/1/indieauth-now-supports-openid-delegation to use aaronparecki.com instead of example.com
#
aaronpk tantek: thanks. no I don't display mentions on my articles yet, still thinking through that. it is logged and will be displayed at /mentions when I get that set up
#
tantek ah ok
#
tantek so adactio has gotten indieweb comments working on his blog posts before you have ;)
#
aaronpk hah yeah
#
tantek really likes the form on his posts for comment submission.
#
aaronpk yeah it's super cool
#
tantek wonders if adactio's older posts have the form too...
#
ShaneHudson it is so stupidly simple. One of those things that make you wonder why it took until 2013 to happen!
#
tantek ShaneHudson it took this long for all the complex shit to fail sufficiently to make room for simpler solutions to emerge
#
tantek like it took long for dinosaurs to go extinct before mammals could emerge and evolve
#
aaronpk lol!
#
ShaneHudson tantek: Yeah true. I suppose we all got too engrosed in doing complicated things rather than taking the easy route. I know I've been guilty of that many times
#
aaronpk it's easy to over-engineer stuff
#
tantek especially if you work for enterprise
#
tantek or you're clueless about existing solutions
#
tantek and particularly worse if you're both
#
ShaneHudson Same with design. We went through skeumorphism before deciding that simple colours work well enough
#
ShaneHudson I say we.. that can mostly be blamed on Apple lol
barneybook, fmarier and caseorganic joined the channel
#
tantek it's been pretty awesome getting to watch adactio make incremental progress on his webmention receiving implementation
#
tantek I'm particularly glad he blogged the steps he took
#
tantek showed that's *ok* to start with just displaying/linking to URLs of mentions
#
ShaneHudson Yeah definitely!
#
aaronpk ok I know I said i was going to stop coding, but that didn't happen
#
ShaneHudson I'm looking forward to my cms being ready.. will be a good month or so though. It has to be low priority sadly
npdoty and habitmelon joined the channel
#
tantek wonders if IndieAuth could also provide information from your hCard to OpenID consumers via OpenID Attribute Exchange
#
aaronpk i was just thinking about h-card + indieauth stuff today
#
ShaneHudson I'm watching a Steve Wozniak video.. has he taken any interest in indie web? I imagine it is something he would like
#
@davidmead RT @t: switched my #OpenID from #myOpenID to #IndieAuth. You should too: http://indiewebcamp.com/IndieAuth#Use_IndieAuth_for_your_OpenID Nice job @aaronpk: http://tantek.com/2013/258/t3/switch-openid-delegate-myopenid-indieauth (twitter.com/_/status/379418968123273217)
#
tantek ShaneHudson - ask the first question first
#
ShaneHudson tantek: What do you mean?
#
tantek ShaneHudson - what's his personal site?
#
ShaneHudson woz.org, I think?
#
@aaronpk Well so much for that. Now if you send me an SMS with "ping" you'll get an auto-reply with my location... #indieweb http://aaronparecki.com/replies/2013/09/15/2/indieweb (twitter.com/_/status/379419977482137600)
#
aaronpk heh let's see how many SMSs that results in
#
ShaneHudson aaronpk: hah, very well done!
#
aaronpk I wonder how quickly I'll have to whitelist that feature
#
aaronpk tantek: I did your trick with replying to myself there. works on my site + twitter!
#
tantek aaronpk - awesome!
#
tantek.com created /welcoming (+792) "stub with common things to say to be welcoming to new folks" (view diff)
#
tantek since we're getting new people nearly everyday - just a page of notes for folks who've been here to provide guidance on welcoming new people
#
aaronpk great idea
#
tantek http://indiewebcamp.com/welcoming
#
caseorganic fantastic
#
tantek I've been doing most of these off the top of my head, so I figured I might as well export my mental script ;)
#
tantek continues to replicate his brainstorms and behavioral patterns to the wiki.
#
aaronpk pretty soon we can replace tantek with a small shell script
#
ShaneHudson Great idea :)
#
ShaneHudson hah!
#
tantek caseorganic, remember our conversation about cloning ourselves? ;)
#
caseorganic tantek: yes
#
caseorganic tantek: my friend anselm was having a meetup on bots recently
#
ShaneHudson Right I best be off to bed.. almost 3am! Goodnight all :)
#
Loqi night night
#
tantek I need to finish packing
#
tantek didn't get to finish updating the microformats wiki with parsing meetup discussions
#
caseorganic tantek: i get the same questions mostly from people about cyborg anthro, so i wanted to allow short scripts to be given to users that asked questions. the dialogues/texts would be based on keywords
#
aaronpk ah yea was curios about that
#
caseorganic tantek: there could be a welcome bot that welcomes new people and gives them info
#
caseorganic in case no one is in the channel
#
tantek caseorganic - a welcoming bot feels less friendly
#
tantek than humans
#
caseorganic tantek: it is
#
tantek because with humans - we have relationship memory
#
tantek typical bots don't
#
caseorganic tantek: yes - and the bot would also have to tell us that they interacted with a new person
#
tantek because we have relatioship memory, we invest emotionally in human-human interactions
#
aaronpk i stil want to make a welcome bot for the #geoloqi channel. people often drop in asking "anybody there"? and I want to make it so that if nobody answers in a short time gives a friendly response
#
tantek and because we invest emotionally in those interactions, we invest indirectly in the context of those interactions, this channel
#
tantek I'd rather help make it easier for humans to generally be welcoming
#
caseorganic aaronpk: it would make sense for the geoloqi channel - we're not there all the time and people often need help
#
tantek than write a welcome bot
#
tantek I'd rather write culture software than bot software
#
tantek It scales better emotionally
#
Loqi [mention] http://aaronparecki.com/replies/2013/09/15/3/ linked to http://indiewebcamp.com/Own_Your_Phone_Number (webmention)
habitmelon joined the channel
#
tantek.com edited /welcoming (+177) "add more question explanation, bold questions/statements to new folks" (view diff)
#
aaronparecki.com edited /p3k (+197) "add screenshots of composing interface per shaners' request" (view diff)
#
tantek aaronpk - screenshot of the "mini post UI" would be good too!
#
aaronparecki.com edited /p3k (+98) "re-prioritizing itches" (view diff)
#
tantek aaronpk - we need a "HTTP" version of this: http://i.qkme.me/3pevg4.jpg
#
tantek (re: protocols)
#
aaronpk wow that image is surprisingly hard to find
#
aaronpk http://meme.loqi.me/4S4LqY9v.jpg
#
aaronpk er, http://meme.loqi.me/4S4hKYFr.jpg
#
Loqi who, me?
#
aaronparecki.com edited /p3k (+107) "add mini note ui" (view diff)
#
aaronparecki.com edited /p3k (+2) "cyrillic з" (view diff)
#
aaronpk debates changing the page name to pзk and adding a redirect
#
aaronparecki.com uploaded /Special:Log/upload "uploaded "[[File:p3k-logo.png]]""
#
aaronparecki.com edited /Special:Log/upload () "uploaded a new version of "[[File:p3k-logo.png]]"" (view diff)
#
aaronparecki.com edited /p3k (+29) "add placeholder logo" (view diff)
#
tantek aaronpk - please don't (change name to include cyrillic char)
#
tantek it's an antipattern to mix script chars like that
#
tantek commonly used by phishing sites
#
tantek so much so that there are some algorithms that look for that (mixed script words) as a sign of shenanigans
#
aaronpk hah ok
#
tantek has no idea what wiki page to document that on
#
aaronpk lol
#
shaners tantek: go to sleep, dummy.
#
tantek can't sleep, still packing
#
shaners looks like you're typing ;)
#
aaronpk my packing usually involves at least 50% keystrokes
tpinto joined the channel
#
@Sunng Saved on @Delicious: http://aaronparecki.com/articles/2013/09/15/1/indieauth-now-supports-openid-delegation IndieAuth now supports OpenID delegation! - Aaron Parecki (twitter.com/_/status/379437078523568128)
#
aaronpk delicious is still a thing?
#
@cstanhope RT @aaronpk: IndieAuth now supports OpenID delegation! Bye-bye MyOpenID! http://aaronparecki.com/articles/2013/09/15/1/indieauth-now-supports-openid-delegation (twitter.com/_/status/379440493949505536)
smus joined the channel
#
@matro RT @t: Why web protocols should just use HTTP+params and no XML-RPC: Use a <form> to test: http://gist.github.com/adactio/6575229 #webmention (ttk.me t4S32) (twitter.com/_/status/379448987176419328)
smus, habitmelon, tpinto, melvster and LauraJ joined the channel
#
reidab aaronpk: I can connect to http://aaronparecki.com/ but http://aaron.pk/ is timing out
#
reidab I mention it here, because I was trying to load your post :P
#
tantek confirmed, aaron.pk is also timing out for me
#
peat It loaded for me about 30 minutes ago. Sorry for busting it, guys.
#
peat Heh: http://www.google.com/trends/explore?q=openid#q=openid%2C%20%20oauth&cmpt=q
tpinto joined the channel
#
neuro` Good morning
habitmelon joined the channel
#
aaronpk reidab: oops thanks
#
aaronpk ooh the indiewebcamp wiki is on the same server as aaron.pk
#
aaronpk that's my old server i'm trying to move off of
#
@mola_io RT @t: switched my #OpenID from #myOpenID to #IndieAuth. You should too: http://indiewebcamp.com/IndieAuth#Use_IndieAuth_for_your_OpenID Nice job @aaronpk: http://tantek.com/2013/258/t3/switch-openid-delegate-myopenid-indieauth (twitter.com/_/status/379476724511039488)
#
aaronpk was able to reboot the server from my phone while I was out at a bar
pfenwick joined the channel
#
@OnTheWebz RT @t: switched my #OpenID from #myOpenID to #IndieAuth. You should too: http://indiewebcamp.com/IndieAuth#Use_IndieAuth_for_your_OpenID Nice job @aaronpk: http://tantek.com/2013/258/t3/switch-openid-delegate-myopenid-indieauth (twitter.com/_/status/379481066932682752)
#
aaronpk wow
#
aaronpk http://chrissaad.wordpress.com/2008/12/01/facebook-connect-aka-hailstorm-20/
#
aaronpk "... while Facebook is quietly and methodically building out this vision with massive partners, the standards community is busy squabbling about naming the open alternative."
wardn_ joined the channel
#
aaronpk found on a cnet post about OpenID http://news.cnet.com/8301-17939_109-10111404-2.html
tpinto joined the channel
#
@Sunng https://indieauth.com/ looks smart (twitter.com/_/status/379483909659955202)
habitmelon joined the channel
#
@Arty2 RT @t: switched my #OpenID from #myOpenID to #IndieAuth. You should too: http://indiewebcamp.com/IndieAuth#Use_IndieAuth_for_your_OpenID Nice job @aaronpk: http://tantek.com/2013/258/t3/switch-openid-delegate-myopenid-indieauth (twitter.com/_/status/379486740727463938)
npdoty joined the channel
#
@snarfed_org @mkaz @photomatt hear, hear! welcome to the #indieweb! (twitter.com/_/status/379497792059609090)
jschweinsberg joined the channel
#
jschweinsberg.de edited /IRC_People (+60) "Added myself" (view diff)
tpinto and cweiske joined the channel
#
@kongroove RT @t: Why web protocols should just use HTTP+params and no XML-RPC: Use a <form> to test: http://gist.github.com/adactio/6575229 #webmention (ttk.me t4S32) (twitter.com/_/status/379506478480359424)
#
@pfefferle IndieAuth unterstützt OpenID delegation http://notizblog.org/2013/09/16/indieauth-unterstuetzt-openid-delegation/ (twitter.com/_/status/379507769654509568)
eschnou, abrereton, LauraJ, barnabywalters, tpinto, andreypopp, pfenwick, gjones and pfefferle joined the channel
#
@new_wp_plugins New #wordpress plugin: IndieAuth- http://wordpress.org/plugins/indieauth/ An IndieAuth plugin for WordPress (twitter.com/_/status/379545967944429569)
#
@tech88tech RT @new_wp_plugins: New #wordpress plugin: IndieAuth- http://wordpress.org/plugins/indieauth/ An IndieAuth plugin for WordPress (twitter.com/_/status/379548769135910912)
#
@mcepl RT @t: switched my #OpenID from #myOpenID to #IndieAuth. You should too: http://indiewebcamp.com/IndieAuth#Use_IndieAuth_for_your_OpenID Nice job @aaronpk: http://tantek.com/2013/258/t3/switch-openid-delegate-myopenid-indieauth (twitter.com/_/status/379553146554417152)
bnvk joined the channel
#
@wordpressyeah IndieAuth http://networkedblogs.com/P6CcE (twitter.com/_/status/379557638767259649)
#
@kevinbeynon @adactio Um... should the original author or the responder consider truncating the #webmention response? :/ #webmentiongraffiti (twitter.com/_/status/379558043827982336)
friedcell joined the channel
#
@barryf @aaronpk Thanks very much! Please do :) I wanted to pull together the separate #indieweb components I'd read about in one place. (twitter.com/_/status/379567158021607424)
abrereton joined the channel
#
@kevinbeynon @adactio What if there was a 'webmention text' that a responder could provide to sites that displayed less content? Too messy? (twitter.com/_/status/379574810742779904)
#
ShaneHudson lock
#
ShaneHudson oops wrong window
JasonO, cyclick and matthewlmcclure joined the channel
#
@gumptionthomas RT @aaronpk: IndieAuth now supports OpenID delegation! Bye-bye MyOpenID! http://aaronparecki.com/articles/2013/09/15/1/indieauth-now-supports-openid-delegation (twitter.com/_/status/379589156713664512)
LauraJ joined the channel
#
@meyerweb Trying to set up IndieAuth, getting “Parameter "profile" must be one of the rel=me links in the site specified in the "me" parameter”. Wha? (twitter.com/_/status/379599855586246659)
#
@KaraGould85 RT @meyerweb: Trying to set up IndieAuth, getting “Parameter "profile" must be one of the rel=me links in the site specified in the "me" pa… (twitter.com/_/status/379599923161100288)
#
Loqi [mention] http://www.nicolas-bermond.com/coworking/indiewebcamp-2013 linked to http://indiewebcamp.com/2013/UK/ (pingback)
eschnou joined the channel
#
@nicolas2fr IndieWebCamp Uk Brighton, les photos dans le cadre du projet #LeBateau http://www.nicolas-bermond.com/?p=1816 cc @indiewebcamp @xtof_fr (twitter.com/_/status/379604046174093313)
#
Loqi [@meyerweb] Figured out my IndieAuth problem
#
Loqi had to force a re-scan to capture working 'me' URL after fixing another problem. +@aaronpk (http://twtr.io/cf439N9_S8)
barneybook joined the channel
#
@meyerweb I really dig IndieAuth (https://indieauth.com/). Would love to see the process be more human-first when things go wrong. (twitter.com/_/status/379606599720923136)
habitmelon joined the channel
#
@ericbollens RT @meyerweb: I really dig IndieAuth (https://indieauth.com/). Would love to see the process be more human-first when things go wrong. (twitter.com/_/status/379608441892765697)
LauraJ joined the channel
#
@Kuzeko RT @meyerweb: I really dig IndieAuth (https://indieauth.com/). Would love to see the process be more human-first when things go wrong. (twitter.com/_/status/379613229741121537)
LauraJ, habitmelon, _6a68 and pfefferle joined the channel
#
@jeffgodd RT @peat: Instructions on how to use https://indieauth.com/ as an #OpenID delegate: http://indiewebcamp.com/OpenID (twitter.com/_/status/379619535122214914)
habitmelon, bnvk, _6a681, _6a68 and pfefferle joined the channel
#
Loqi [mention] http://aaronparecki.com/replies/2013/09/16/1/indieauth linked to http://indiewebcamp.com/indieauth (webmention)
tommorris, earplugs and andreypopp joined the channel
#
@aaronpk @meyerweb Thanks! Yes please feel free to make suggestions. Writing error messages is hard! Now that you can log... http://aaronparecki.com/replies/2013/09/16/1/indieauth (twitter.com/_/status/379625933998551040)
LauraJ, andreypopp, habitmelon, morrocco_mole, friedcell, squeakytoy, benprew and ozten joined the channel
#
@marsi .@meyerweb https://indieauth.com/ is a nice concept, but how is authentication without secure connections (SSL/TLS) even remotely secure? (twitter.com/_/status/379641898639425537)
#
habitmelon IndieWeb uses SSL though, <link rel="openid.server" href="https://indieauth.com/openid">
#
habitmelon s/Web/Auth
#
Loqi habitmelon meant to say: IndieAuth uses SSL though, <link rel="openid.server" href="https://indieauth.com/openid">
#
sparverius s//s
#
aaronpk yeah indieauth uses ssl, but doesn't enforce that sites using it use ssl
#
habitmelon So suppose an RP that doesn't enforce SSL gets an OAuth token (or some other authorization), could that be intercepted?
#
aaronpk yes. but it's not an oauth token, it doesn't actually give access to anything
ozten joined the channel
#
aaronpk I have a way that should prevent that situation, but haven't implemented it yet
#
habitmelon Okay
amblin and caseorganic joined the channel
#
aaronpk the way it would work is when you first send the user to indieauth.com/auth?me.... you also generate a "nonce" parameter and include it.
#
aaronpk then indieauth redirets back to the RP with the auth code like normal
#
aaronpk but then to validate the auth code and retrieve the domain name of the person that belongs to, the RP would also have to include the same nonce value in the request to /verify
#
aaronpk the key is that the nonce is only ever sent over an SSL connection to https://indieauth.com
#
bret aaronpk: awesome work yesterday!
#
aaronpk bret: thanks! i'm pretty excited about it!
#
bret is there a hacker news announcement I can vote up?
#
aaronpk i have a post on my site taht could be submitted
#
aaronpk http://aaronparecki.com/articles/2013/09/15/1/indieauth-now-supports-openid-delegation
#
peat ... I did a quick writeup on the update as well
#
peat it's specific to the deprecation of myopenid, though. http://peat.org/2013/09/15/replacing-myopenid/
#
aaronpk awesome!
#
peat Regarding the security of third party auth, this is a pretty decent list of attack opportunities against OpenID. https://sites.google.com/site/openidreview/issues
#
bret it just occurred to me as well, indieauth is now compatible with smallest federated wiki via open id
#
aaronpk heh "Account recovery that's merely dependent on email access should be unacceptable for any OP."
#
peat :)
#
aaronpk in other words, every site ever
#
peat ... it turns out that computers are insecure.
#
aaronpk mostly it's the meat in front of the computer that's insecure
#
peat What are you saying about me?
#
peat (rimshot)
#
aaronpk Loqi knows
#
peat pets Loqi.
#
Loqi yeah!
#
habitmelon I'm not insecure (nervously seeks approval of surrounding humans)
#
aaronpk gives loqi a security
#
Loqi gives back the security
#
peat Heh.
#
peat Completely unrelated: boat salvage is neat. http://www.telegraph.co.uk/news/worldnews/europe/italy/10311659/Costa-Concordia-salvage-operation-live.html
neuro` and npdoty joined the channel
#
@sl2mmer How to replace MyOpenID with IndieAuth for OpenID delegation http://www.reddit.com/r/programming/comments/1migah/how_to_replace_myopenid_with_indieauth_for_openid/?utm_source=dlvr.it&utm_medium=twitter (twitter.com/_/status/379657580144230400)
#
aaronpk ohai reddit
#
Loqi [mention] http://inkdroid.org/journal/2013/09/16/mentioning-webmention/ linked to http://indiewebcamp.com/webmention (pingback)
#
Loqi [mention] http://inkdroid.org/journal/2013/09/16/mentioning-webmention/ linked to http://indiewebcamp.com/why (pingback)
#
@REDDITSPAMMOR #reddit How to replace MyOpenID with IndieAuth for OpenID delegation: submitted by peat [link] [comment] http://www.reddit.com/r/programming/comments/1migah/how_to_replace_myopenid_with_indieauth_for_openid/ #rulez (twitter.com/_/status/379657868162908160)
jernst joined the channel
#
bret aaronpk, I submited your post it to hackernews as well
#
bret https://news.ycombinator.com/
#
bret "IndieAuth: A modern replacement to MyOpenID"
#
@reddit4devs http://t.co/YP41w5unoc How to replace MyOpenID with IndieAuth for OpenID delegation (twitter.com/_/status/379660883699724288)
#
@therealgdr @indiewebcamp You need @yubico YubiKey support! (twitter.com/_/status/379661342673629184)
#
bret what is a yubico?
#
pdurbin yubico key. some hardware security thing
#
@edsu new blog post: mentioning webmention http://inkdroid.org/journal/2013/09/16/mentioning-webmention/?utm_source=rss&utm_medium=rss&utm_campaign=mentioning-webmention (twitter.com/_/status/379662805752115201)
#
@benfinoradin RT @edsu: new blog post: mentioning webmention http://inkdroid.org/journal/2013/09/16/mentioning-webmention/?utm_source=rss&utm_medium=rss&utm_campaign=mentioning-webmention (twitter.com/_/status/379664001111973888)
#
@edsu @pfefferle hey there, I gave your wordpress-webmention plugin a try http://inkdroid.org/journal/2013/09/16/mentioning-webmention/ ... (twitter.com/_/status/379665651910311936)
jgraham909 and marjolein joined the channel
#
@InfoSysReddit How to replace MyOpenID with IndieAuth for OpenID delegation submitted by peat[link] [comment] http://www.reddit.com/r/programming/comments/1migah/how_to_replace_myopenid_with_indieauth_for_openid/ (twitter.com/_/status/379667091580026881)
andreypopp, donpdonp and eschnou joined the channel
#
@pfefferle @edsu the webmention plugin only sends and receives mentions it adds no markup to your theme. (twitter.com/_/status/379677725965172736)
#
@infopeep Summers, Ed: mentioning webmention http://inkdroid.org/journal/2013/09/16/mentioning-webmention/?utm_source=rss&utm_medium=rss&utm_campaign=mentioning-webmention (twitter.com/_/status/379678087971360768)
tpinto, fmarier and shaners joined the channel
#
shaners aaronpk: wrt to eric meter's rel-me error / re-scan fix, could indieauth automatically re-scan once if no rel-mes are found?
#
aaronpk i suppose it shouldn't cache an empty list
#
shaners ;)
#
aaronpk issue'd https://github.com/aaronpk/IndieAuth/issues/35
#
shaners aaronpk++
#
Loqi aaronpk has 227 karma
#
shaners is anyone marking up a place/location of a post?
#
shaners i.e., i wrote this post/photo/whatever while at Sisters Coffee.
#
aaronpk http://aaronparecki.com/metrics/2013/09/09/073215/
#
aaronpk note quite the example you were looking for probably
#
shaners my issue is that i'm gonna use h-geo (lat, lon, alt). but i also want to include a name of the "place"
#
shaners it doesn't look like h-adr or h-geo allows p-name
#
aaronpk then you need an h-card
#
shaners right
#
shaners BUT
#
shaners i don't want parsers to think that the h-card represents the author
#
shaners so
#
aaronpk "p-location h-card"
#
shaners how do i specify that this particular h-card is about
#
shaners oh
#
shaners http://microformats.org/wiki/h-entry
#
shaners where does it say anything about p-location?
#
aaronpk http://pin13.net/mf2/?url=http%3A%2F%2Fcalagator.org%2Fevents%2F1250464804
#
aaronpk good point
#
shaners i mean, it seems legit. but i couldn't find anything about it. i thought i was going crazy.
#
aaronpk also why are p-latitude, p-longitude and p-alititude listed as properties of the h-entry? those are properties of h-geo
#
aaronpk p-geo*
#
shaners maybe part of the flattening effort of mf2?
#
aaronpk oh? i didn't know that was a thing
#
shaners http://microformats.org/wiki/microformats-2#flat_sets_of_properties
#
shaners mf1 had lots of nesting hierarchy
#
aaronpk whoa
#
shaners more complexity
#
aaronpk sorta, there's something nice about having a well defined "geo" or "adr" format in their own object
#
shaners agreed. when that's all you need.
#
shaners maybe propose pulling them out of h-entry to tantek, et al in #microformats
#
shaners !tell tantek why are p-geo, p-lat-, p-lon, and p-alt on h-entry when they're a part of h-geo?
#
Loqi Ok, I'll tell him that when I see him next
habitmelon joined the channel
#
shaners !tell tantek how would you mark up the "this is where i published this post" place NAME? h-geo for lat/lon/alt, but where do i put the name? i don't want parsers to think that an h-card of the place i published from to confuse that as the author. aaronpk suggested ".p-location .h-card", but there's no mention of p-location on http://microformats.org/wiki/h-entry
#
Loqi Ok, I'll tell him that when I see him next
#
aaronpk shaners: tantek says adding "p-location h-card" and dropping the geo properties makes sense
#
shaners grood
#
shaners :D
matthewlmcclure and tpinto joined the channel
#
@sillygwailo Bummed that myOpenID is shutting down? Maybe https://indieauth.com/ is for you! @aaronpk has notes at http://aaronparecki.com/articles/2013/09/15/1/indieauth-now-supports-openid-delegation (twitter.com/_/status/379698798710509568)
LauraJ, npdoty, fmarier and barneybook joined the channel
#
shaners aaronpk: is this what you're thinking for h-entry p-location markups?
#
shaners https://gist.github.com/veganstraightedge/6586473
#
aaronpk not quite, take a look here http://aaronparecki.com/events/2013/09/08/1/indiewebcamp-uk-2013 search for p-location
tpinto and josephboyle joined the channel
#
shanehudson.net edited /videos_about_the_indieweb (+145) "Added Jeremy's The Web Ahead interview" (view diff)
#
ShaneHudson Wasn't sure where to put that, being audio. Decided it is more like video than posts :) Wondering if we should merge the pages though?
#
@ShaneHudson @adactio Listening to your Web Ahead interview, love the idea of linking to tweets etc if microformat not used in webmention! @jensimmons (twitter.com/_/status/379724867287130112)
tilgovi and abrereton joined the channel
#
aaronpk i dont' rememeber the thinking behind having the separate video page
tantek joined the channel
#
Loqi tantek: shaners left you a message 3 hours, 8 minutes ago: why are p-geo, p-lat-, p-lon, and p-alt on h-entry when they're a part of h-geo?
#
Loqi tantek: shaners left you a message 3 hours, 5 minutes ago: how would you mark up the "this is where i published this post" place NAME? h-geo for lat/lon/alt, but where do i put the name? i don't want parsers to think that an h-card of the place i published from to confuse that as the author. aaronpk suggested ".p-location .h-card", but there's no mention of p-location on http://microformats.org/wiki/h-entry
#
tantek I'll edit h-entry when I get to my hotel
#
tantek Cc shaners
#
tantek Aaronpk the point behind the video page is that people like watching videos
#
tantek And having to fish for the among text posts is not user friendly.
#
tantek Remember when bnvk was making a big deal about promo videos etc?
#
aaronpk ahh
#
aaronpk in that case the video page needs thumbnails of the videos and better captions. needs to look less like a list.
#
tantek ShaneHudson: You were there too - at myHotel when bnvk was going off about videos.
#
tantek Aaronpk feel free to add thumbnails.
#
aaronpk i can do that :)
#
ShaneHudson tantek: Oh right, yeah
#
tantek Hey you kids are supposed to have better memories. :)
#
ShaneHudson haha
#
@benward @veganstraightedge I'd like to, would be neat to support webmention, but right now there's no way I could put it in and guarantee stability. (twitter.com/_/status/379741848950300672)
#
@veganstraightedge @benward No easy war to add .h-entry or webmention? (twitter.com/_/status/379742025504919552)
pfenwick joined the channel
#
@veganstraightedge @benward No easy way to add .h-entry or webmention? (twitter.com/_/status/379742421304606720)
#
@benward @veganstraightedge Adding webmention crawling, parsing, and pinging at our scale can be assumed not to be “easy.” (twitter.com/_/status/379743923117510656)
#
aaronpk shaners: I think he misunderstood your request
#
shaners aaronpk: i'm clarifying
#
aaronpk cool
christoffer__ joined the channel
#
aaronpk shaners: I've heard the "it's hard to make it not break later" argument a few times
#
shaners big companies...
pfenwick and jgraham909 joined the channel