2013-11-12 UTC
thatryana joined the channel
bnvk joined the channel
# 00:20 pdurbin aaronpk: at least for higher ed in the US, there's InCommon, where institutions trust other member institutions: https://incommon.org ... I'm just learning about it though... fuzzy on the details... but I've been asked "Is your Service Provider already registered with InCommon?"
# 00:58 XgF aaronpk: Bridging OAuth and SAML is one of the reasons why OAuth 2.0 is a bajillion specs and incomprehensible
# 00:59 XgF Theres OAuth 2.0 + Bearer tokens (like OAuth 1.1 but simpler)
# 00:59 XgF OAuth 2.0 + HMAC (Pretty much OAuth 1.1)
# 00:59 XgF OAuth 2.0 + JWT ("We reinvented SAML in JSON because we want to sell you our software again")
# 01:00 XgF JWT is how you sign an assertion. SAML is how you sign an assertion
# 01:00 XgF Of course the whole JOSE committee are a bunch of retards
# 01:01 XgF (Hey, we're designing a spec in the 21st century! Of course mandate support for RSA with PKCS#1v1.5 padding, that hasn't been broken for OVER A DECADE!)
# 01:04 KevinMarks_ "However, as a rich and highly extensible framework with many optional components, on its own, this specification is likely to produce a wide range of non-interoperable implementations."
# 01:04 aaronpk that was one of Eran Hammer's last edits to that document
# 01:05 XgF The sensible members of the IETF basically said we're not publishing it unless you rename it a framework and point out that everybody's version of OAuth 2 is different
# 01:06 XgF In reality OAuth 2 is pretty simple, it's just unfortunately defined in about 5 times as many specifications as is actually necessary
# 01:08 bret Is there some sort of Oauth2.thegoodparts? A subset of Oauth 2 that is deemed tasteful?
# 01:08 XgF OAuth 2 Bearer Profile is pretty simple. OAuth 2 with HMAC is as secure as OAuth 1.1. Both are good
# 01:09 XgF Unfortunately, you've gotta piece things together over 3(?) specifications for each of them
paulcp joined the channel
# 01:09 XgF I wish somebody would build an "OAuth 2.0 Basic Web /Protocol/" which takes those three and packages them together as a replacement from 1.1
# 01:10 XgF Well Bearer is what the webby people are going to use anyway
# 01:10 XgF (Bearer over TLS, HMAC over HTTP)
paulcp, caseorganic, snarfed and tantek joined the channel
# 02:05 tantek brianloveswords there are no good books on the subject of federated networks because there are no good federated networks. yet. email may have had a glimmer but it being crushed under overwhelming spam and will die as a result.
paulcp joined the channel
acegiak, astrolin, snarfed, skinny, melvster, bnvk, neirpyc, tantek, b0bg0d, earplugs, bret, andreypopp, cweiske, indiewebcamp-vis, pfenwick, jgraham909, skinny_, LauraJ and Jihaisse joined the channel
bnvk, LauraJ, KevinMarks, josephboyle, friedcell, julien51 and barnabywalters joined the channel
bnvk and pfefferle joined the channel
caseorganic, skinny and andreypopp joined the channel
bnvk, pfefferle, andreypopp and acegiak joined the channel
adactio, caseorganic, scor, andreypopp, Acidnerd, LauraJ, caseorga_, tpinto, XgF, tantek and bnvk joined the channel
# 14:26 Jihaisse pfefferle: hello, Have you get the time to have a look at the plugin ?
# 14:28 pfefferle Jihaisse I had, but it's very confusing with all the nested "if"s
# 14:30 pfefferle the wordpress stuff is looking fine and the rest seems working ;)
# 14:32 Jihaisse pfefferle: yeah, the code in the "Social" part of the plugin, is directly copy/pasted from the Social plugin
# 14:32 Jihaisse I started by thinking : "this works, don't change it"
# 14:33 Jihaisse ok, do you think it would be easy to add another plugin ?
# 14:34 Jihaisse pfefferle: btw, do you make POSSE on your wordpress ?
# 14:35 pfefferle I had a look at the Jetpack plugin, but I couldn't find the ids of twitter or facebook, seems that they don't save it.
skinny joined the channel
caseorganic joined the channel
ozten, heath, brianloveswords, LauraJ, bnvk and josephboyle joined the channel
# 16:12 ozten aaronpk: Sitting in draft folder for too long
# 16:12 ozten but I haven't been hacking on anything concretely
# 16:12 ozten so I guess putting the perspective out there is better than nothing
# 16:12 ozten and I hope to start prototying some of the flows
# 16:15 ozten barnabywalters: No, I just got that reference an hour ago in #identity (mozilla)
# 16:19 tantek ozten - cool. love the brainstorming out loud. looking forward to seeing how you take steps toward your vision with your own online presence :)
# 16:20 ozten tantek: email would be a big checkmark - I already host quite a bit of me
# 16:21 tantek barnabywalters - there doesn't seem to be anything consumer-oriented. all the docs seem developer-oriented.
# 16:22 tantek so it's a lot of blue sky and no actual building then?
# 16:22 tantek well at least people are showing a desire to solve the problem(s)
# 16:23 tantek maybe they'll eventually be frustrated with lack of progress and come around to shipping something simple/minimal on their own site.
# 16:26 tantek and deploying something minimal and incomplete on your own site is scary. I'm hoping all the "IndieWeb examples" sections on all the building blocks help with that by showing that it's ok to be awkward and incremental.
# 16:26 tantek it's so much easier and safer to simply brainstorm APIs.
# 16:27 tommorris awkward and incremental is the only way to be. perfection requires time. time otherwise taken by having a job and a long commute. ;)
_6a68 joined the channel
# 16:30 tommorris if someone comes to my site and says "this sucks, I can build something better", we win. :)
# 16:37 barnabywalters kinda like how discussions based on facts tend towards better facts, discussions based on opinion tend towards shouting
LauraJ and b0bg0d joined the channel
# 16:44 barnabywalters how does one tell whether or not the name of a h-entry should be shown in addition to it’s content?
# 16:45 barnabywalters e.g. for an article, the name will be short and different from the content, and expected to be shown
ryana joined the channel
# 16:45 barnabywalters whereas for a note, the name is either the content, or a substring of the content
# 16:46 barnabywalters at the moment I’m just comparing the name to the plaintext value of the content, but that doesn’t always work for various reasons
# 16:47 barnabywalters e.g. different whitespace collapsing, JS in note name but not content (in the case of idno checkins)
# 16:48 barnabywalters just seeing whether or not the name is *shorter* than the content will work, given some constraints…
# 16:49 barnabywalters 1) that the name is not a truncated version of the content (which I’m pretty sure noone is doing at the mo)
friedcell joined the channel
# 17:01 tantek KevinMarks: "…moving discussion of my videos to reddit instead"
# 17:02 tantek so she's talking about moving to a comments silo, rather than indieweb
bnvk, Acidnerd, bnvk_, benprew and snarfed joined the channel
# 17:16 KevinMarks She's moving her posts and videos to her own site. We should help her with comments
friedcell joined the channel
# 17:21 XgF barnabywalters: I find the existing delivery of notes unsatisfying. IMO they should be marked up /without/ title
# 17:21 XgF Because it often includes a title which is just a duplicate of the content
# 17:22 tantek barnabywalters - the simple algorithm is if the name of the note is the same as the content, don't show the title
# 17:22 barnabywalters mf2 structures always have name properties due to implied parsing. better that it’s explicitly defined by the author than left to whatever the innertext of the root mf element is
# 17:22 aaronpk tantek: thats the problem, determining whether they are the same
# 17:23 tantek you can add to that: if the name of the note ends with an ellipsis (… or … (unicode)) then drop the ellipsis and if the result is a prefix for the content, then don't show the name
# 17:23 tantek barnabywalters - alright, that sounds like a challenge to write up the algorithm and start collecting issues based on real world examples
# 17:23 XgF barnabywalters: Then I'd say MF2 is buggy
# 17:23 barnabywalters so I’ll try improving my implementation until I’m happy with it, then draft an algorithm based on that
# 17:25 barnabywalters also, ensuring that all mf structures have *some* textual representation to help identify them e.g. in lists
# 17:25 XgF Perhaps the appropriate thing to say is that "For objects of type note the name may (should?) be ignored by recieving applications"
# 17:26 XgF As someone who deals a lot with ActivityStreams its' easy to forget what MF2 is missing...
fmarier joined the channel
# 17:29 tantek XgF - how do you deal "a lot with ActivityStreams"? they seem to have nearly no adoption on the public web.
josephboyle joined the channel
# 17:38 tantek I'd be interested in seeing what exceptions you've found to that
# 17:38 tantek as when I last looked at this problem and even wrote a little code - those two cases handled it no problem
# 17:38 tantek maybe the trim() was taking care of the whitespace differences you are seeing
# 17:38 tantek but if so maybe we need to better specify whitespace handling (I thought we had)
# 17:39 aaronpk I think whitespace is still a problem. not sure if the problem is in the source markup or the parsing though.
# 17:39 aaronpk and if in the source, then there's an issue with authors not wanting to change the markup to support a better parsed result
# 17:40 aaronpk certainly not if it's inside a <pre> tag... and then there's the CSS issue
# 17:41 barnabywalters it’s also throwing away information which the consumer of the parsed version can trivially remove, but impossible to put back in
# 17:41 tantek it's usually worked out better for whitespace to *not* be collapsed at parsing time
# 17:41 tantek I guess let's see some real world examples that don't work in that algorithm and we'll figure it out from those
# 17:42 tantek I haven't seen a need for it except in before/after space which trim() takes care of
# 17:45 barnabywalters I might be using the nodeValue when I should be using textContent or some such nonsense
# 17:45 XgF tantek: So these days there's selfdogfooding (a bunch of people on the activitystreams list are pump.io developers, for example)
# 17:45 XgF clients (see every pump.io client, pump.io itself...), the predefined object types/verbs aren't a problem (in fact they're useful),
KevinMarks joined the channel
# 17:50 KevinMarks If you use an HTML5 parser, isn't whitespace collapsed as part of the spec? Maybe need test cases
# 17:52 barnabywalters KevinMarks: if whitespace is collapsed by default, how does white-space: pre work?
ryana joined the channel
# 18:08 tantek or rather - only collapsed in very minimal ways (e.g. before/after tags, sometimes)
# 18:09 KevinMarks I'm still haunted by evil white space that you can type in windows but is invalid utf8
# 18:10 tantek ok that should be easy to deal with, let's treat a line break in the content as termination and see if it is a prefix of the name
# 18:11 tantek because the same node text is being used in both cases
# 18:12 tantek <div class="e-content entry-content"><div class=""><p class="p-name">
# 18:12 tantek barnabywalters the p-name and the e-content's .value key should be identical - why are they different?
# 18:13 tantek they should probably both preserve the internal whitespace
KevinMarks, benprew and paulcp joined the channel
bnvk joined the channel
# 18:42 tantek this: " It didn’t seem worthwhile to spend a lot of time learning how to configure it correctly and create a complex theme, when what I really wanted to do was quickly manage my design and focus on writing. Enter static site generators."
cweiske joined the channel
# 18:44 tantek XgF - have any of those supposed activitystreams selfdogfooders bothered to update the AS wiki pages accordingly? and if it's all pump.io - that sounds almost like an implementation specific technology.
scor joined the channel
# 18:53 XgF tantek: There are other people using AS, but Pump is the only big "public" deployment
# 18:53 tantek XgF - then why isn't it documented on the AS wiki?
# 18:53 XgF The wiki pages are a bit tumbleweedy, mostly because what needs saying gets said in the specs
# 18:53 tantek I guess I'm not taking your word for it in IRC
# 18:53 tantek well - lack of documentation of implementations is a problem
# 18:54 tantek it indicates insufficient critical mass / community IMO
# 18:54 tantek that would benefit from broken into a modular set of minimal pages on the wiki
# 18:55 XgF The JSON serialization spec (the "core spec") is pretty simple (and can easily be grokked in a single reading). The base schema spec could do with better organization, yes
# 18:56 XgF I'll investigate that (though I need to find out whats happening ATM
# 18:56 XgF there was talk of the W3C wanting to adopt ActivityStreams as an official workgroup)
# 18:59 snarfed to be fair, the google+ API's data format could arguably count as AS too
# 18:59 snarfed but it is tweaked, and it's only the data model, not any of the API itself, and the API is extremely limited…so it's not much
# 19:02 tantek XgF - the talk at the osfw3c meetup in August was a bit of a disaster
# 19:02 tantek the Google schema folks were called out for bullying changes in ActivityStreams
# 19:03 tantek and meanwhile the JSON-LD folks were pressuring the AS folks into adopting JSON-LD
# 19:03 tantek it had all the makings of a bureaucratic trainwreck
# 19:03 tantek snarfed- yeah - Google+ API's data model is a conceptual fork of AS
# 19:04 snarfed most of the core properties, enum values, etc are the same
# 19:05 snarfed they add extra stuff, but they don't mess too much with the AS base, so it seems like most code is interoperable with only minimal changes
# 19:05 snarfed regardless, it's academic since we don't work much with AS here
# 19:06 tantek G+ has been very hard to interoperate with in any capacity
# 19:07 tantek so perhaps we can subscribe to people who post on G+ via h-entry?
# 19:15 XgF tantek: Yeah, being pulled from both directions
# 19:15 XgF To be fair w.r.t. JSON-LD, the initial starting point for "AS 2.0" was to build it as a profile of JSON-LD
abrereton joined the channel
# 19:16 tantek JSON-LD is a massive distraction for anyone who wants to ship/iterate/interoperate ASAP
# 19:16 tantek because the crowd behind JSON-LD do not actually ship/iterate/interoperate on their own projects/sites with it.
# 19:17 tantek paying attention to JSON-LD is not technical nor practical, only political
amz3 joined the channel
# 19:19 XgF Theres certainly /utility/ there. You could within about ~25 lines build a JSON-LD context which would map ActivityStreams JSON to "ActivityStreams RDF"... but yeah, I want to avoid the Schema.org quagmire
# 19:20 XgF schema.org is an unmitigated mess
# 19:22 XgF [FWIW, I quite like RDF as a data model. It's certainly easier to work with as a "database storage format" than JSON in some ways)
fmarier joined the channel
# 19:22 tantek from original poor design to grab bag additions - schema is bloating up as a maldesigned mess
# 19:23 tantek FWIW, mapping to "ActivityStreams RDF" is not really "utility". that's just mapping between things that have no innate utility themselves
# 19:24 tantek interesting about your perspective/experience that " RDF as a data model. It's certainly easier to work with as a "database storage format" than JSON in some ways"
# 19:25 XgF RDF (or other "object oriented" style) databases become easier the minute you start having cyclic graphs :-)
# 19:25 tantek so either you've figured out something clever about RDF, or are making JSON harder than it should be
bnvk joined the channel
# 19:31 aaronpk XgF: cool, do you know of a simple example like that of using RDF as a data store?
# 19:31 XgF Not sure if there are any deployed projects out there. I was having a bit of a play with Python + Pyramid + RDFLib + a custom "ORM".
# 19:32 XgF From my experience with ZODB, it's pretty much as nice to use (but matches the data structure better if all your data is identified by URI)
jacook joined the channel
# 19:45 amz3 XgF what do you mean by “become easier the minute you start having cyclic graphs”
# 19:45 XgF Using ActivityStreams as an example, a comment is inReplyTo its' parent post, and the comment should be in parentPost.replies
# 19:45 tantek aaronpk - that seems more like an argument against denormalization rather than JSON
# 19:46 tantek using URLs for references to people, posts etc. seems to get around that problem
# 19:46 XgF Document stores tend not to be ACID, so don't do normalization too well
# 19:46 tantek sticking all the data as strings inline in every instance seems to be the problem
# 19:49 amz3 XgF I know what cyclic graphs, I don't understand the first part of the statement «RDF database become easier», why do you mean by easier? Since they handle ACID acrod entities, it makes things easier?
# 19:49 Loqi amz3 meant to say: XgF I know what cyclic graphs, I don't understand the first part of the statement «RDF database become easier», what do you mean by easier? Since they handle ACID acrod entities, it makes things easier?
# 19:51 XgF RDF becomes easier to work with than JSON because your ORM can do the lookups for you
# 19:51 XgF tantek: Will do as soon as I unbreak my rel=me auth :-)
# 19:52 tantek XgF - unbreaking your rel=me auth is easier than any RDF :)
# 19:53 amz3 I never understood the value that brings a RDF datastore, except the RDF query languages that I never studied deeply but seemed very cryptic and difficult to learn, not very scientific, yet I prefer graph databases
paulcp joined the channel
# 19:54 XgF tantek: I finally got sick of Wordpress and MySQL, so my website is now (provisionally) migrated to idno. I haven't yet figured out what benwerd did to get his profile on /...
# 19:56 XgF amz3: The single biggest benefit (IMO) is the distinction between strings and links
paulcp, vrypan, andreypopp, paulcp_, josephboyle, tpinto and benprew_ joined the channel
# 21:19 Loqi hopefully soon to [[pump.io ]], looking towards implementing full integration given time."
barnabywalters, bnvk, paulcp and vrypan joined the channel
abrereton, smus and caseorganic joined the channel
bnvk and tilgovi joined the channel
# 23:08 bret aaronpk: interesting article about mongo
tantek joined the channel
# 23:09 bret also RE osfw3c, that was quite a scene to watch unfold. I'll attest to the accuracy of tantek's description
# 23:11 Loqi MaptimePDX Hack Night on Wednesday, Nov 13, 6:00pm at Esri R&D Center (aka Geoloqi HQ)
# 23:12 tantek bret, bullies really don't like to be called out as such.
# 23:15 bret also ozten i like your noble web ideas! that was a good read too
# 23:16 bret and tantek++ fixing the above attempt
# 23:18 aaronpk tantek: oh cool, she was at the QS meetup when I wrote that article, we talked for a bit!
# 23:18 bret I'm starting to eye http://docpad.org/ as a next step for my site, but part of me wants to do it from scratch to avoid not fully understanding someone elses project
caseorganic joined the channel