petermolnar, Sebastien-L, jjuran, friedcell, Garbee, bnvk, lmjabreu_, ttepasse, adactio and lionzan joined the channel
#lionzanmsg aaronpk Hi! I managed to have webmention inside S3-Website running with no errors. it says it sends 4 webmentions, but they don't appear on the klinked posts... see my post her http://lionzan.me/2014-05-25/testing-webmentions/
nloadholtes, barnabywalters, jonnybarnes and LauraJ joined the channel
#tantekI wrote up some thoughts on deduping on the /webmention page but perhaps it's worth discussing it a bit more and solidifying a primary approach.
#tantekI feel like we should split level 4differentiate https support that works without a warning triangle (i.e. you get a lock), vs. https support that doesn't cause an alert, but still causes a warning triangle next to the URL in the address bar
#kylewmtantek: good call, that's a much bigger hurdle than e.g., level 3 vs. level 4
#tantekthen perhaps we should bump the existing level 5 to level 6, and introduce a new level 5 which is level 4 + no warning triangle (e.g. no mixed mode warnings)
#tantekseems to make more sense to put this new level there (at 4.5 between existing 4 and 5), rather than at 3.5 (between existing 3 and 4), since sending redirects from http to https is both easier, and worthy of doing even with the warning triangle.
#kylewmwoohoo, got rid of the mixed-mode warning, at least on the landing page
#tanteksnarfed - oh neat - thanks! looks like that 2012-12 post is about reaching level 4 (serve everything over https), and 2013-11 he reached grade "A" on the SSL Report
#tantek!tell lionzan go ahead and !tell aaronpk your actual message or question instead of presence querying. It's bettter for everyone here (and someone else might be able to answer your question).
#lionzanhi tantek, I made it! webmention in and out on Jekyll!!
#Loqilionzan: tantek left you a message 53 seconds ago: go ahead and !tell aaronpk your actual message or question instead of presence querying. It's bettter for everyone here (and someone else might be able to answer your question).
#jonnybarneswhen a micropub token request is made, one of the values sent with the request is a `client_id`
#jonnybarnesfor webapps is this the URL that actual API requests will come from
#jonnybarnesit doesnt appear to be a value that is sent with subsequent micropub requests from reading the wiki
chrissaad joined the channel
#kylewm!tell lionzan small tip on the microformats markup on your site -- if you move the author image inside your h-card, parsers will be able to pick it up
#snarfedJeena: yeah, you'd publish the likes as posts with u-like-of links, and send a webmention, but i'm guessing your site already does that
#snarfedif you don't want the like posts to show up in your feed, maybe the minimum new code you need is to hide "like" post types from your feed
#jonnybarnesso client_id, trying to get my head round it, my thought at the moment is actually saving access tokens on my site, i.e. I'd love to be able to go to /admin/tokens and be presented with a list of all the tokens I've generated, i.e. it could list one for ownyourgram and one for waterpigs.co.uk etc
#jonnybarnesbarnabywalters: so if my access tokens are random strings, and server side those random strings have metadata associated with them (currently thinking simple files as oppose to db) then having a file of that random string is how I know its an authenticated request, and then I could say in my UI, this partiuclar post was posted by `client_id`
#barnabywaltersnote that there’s no guarantee that the client ID will actually be the URL you’re posting from, or even the same domain. But it will be the URL your authorization endpoint shows you
#barnabywaltersi.e. in the question “xxxx wants the “post” permission on jonnybarnes.net — grant?âˆ
#tantek.comcreated /Upcoming (+2755) "plenty of links here, time to create it. stub with dfn, site death, domain return, notability to indiewebcamp" (view diff)
#tantekso you have https-only working everywhere on your site then?
paulcp joined the channel
#tantek!tell jonnybarnes when did you start serving everything on your site with https? Do you remember when you flipped the switch? (i.e. to redirect all your http to https)
#jonnybarnestantek: sorry, I can't say, over a year at least
#Loqijonnybarnes: tantek left you a message 2 minutes ago: when did you start serving everything on your site with https? Do you remember when you flipped the switch? (i.e. to redirect all your http to https)
#jonnybarneskylewm: I'm still seeing mixed content warnings on your homepage
#kylewmalmost... I am mirroring a lot of stuff locally (e.g., user pics), but there are some older posts where I embedded an image from an http that still give the mixed content warning
#KartikPrabhuhow do you ensure that external content is over https? If I have an avatar for a comment from tantek it will be over http since he uses http
#KartikPrabhuseems having everything over http is an unrealistic goal
#jonnybarnesKartikPrabhu: my solution to that particular problem is when I receive a webmention, I download the image from the hcard and display it myself
#pauloppenheimi would expect caching to become more universal
#pauloppenheimafter all, it's required for true independence
benwerd joined the channel
#KartikPrabhuanother question: while linking to external posts shoudl I use "//example.com" too. The problem is that webmention receivers look for exact url match and target="https://example.com" won't match "//example.com" from my post source
#tantek.comedited /https (+283) "/* Level 5 security */ dates for willnorris https level 4-5 support with citations, link user page for Peter, forward secrecy, bold headings" (view diff)
#tantek.comedited /https (+231) "DariusDunlap got to Level 3 at or right after IndieWebCampSF, some style tweaks" (view diff)
kylewm and icco joined the channel
#tantek!tell pauloppenheim when did you start using a cert from a trusted CA on your own site? Do you remember when you got the cert / installed it / made sure it worked for https://pauloppenheim.com/ ?
#tantek!tell aaronpk when did you start using a cert from a trusted CA on your own site? Do you remember when you got the cert / installed it / made sure it worked for https://aaronparekci.com/ ?
#Jeenasnarfed yeah my website does that but I don't want to save the likes in the same database structure as my notes and I don't want to show them in the same views, etc. it is mostly a UI question not so much a implementation question.
#snarfedJeena: right, makes sense that it's a UI question. so, why not store them in the same structure and just hide them from the UI?
#snarfed(just curious, you can obviously do whatever you want :P)
#Jeenait is just because it is easier to handle in its own table, but moslty just because I didn't think of consolidating all those from the beginning and now I have different properties for different types of posts in the db. I would need to rewrite it and write migrations to rebuild the database structure and that is just too much work for now ^^
#Loqipauloppenheim: tantek left you a message 15 minutes ago: when did you start using a cert from a trusted CA on your own site? Do you remember when you got the cert / installed it / made sure it worked for https://pauloppenheim.com/ ?
#tantekpauloppenheim: nice! where did you get your cert?
#pauloppenheimit's real, but i'm not in control of the private key or host or anything else in the chain
#pauloppenheimfor many purposes SSL shouldn't be considered guaranteeing of privacy, but in my case it is possible to have somewhat better guarantees than i have now.
#tanteknearly any amount of https does some incremental good
#tantek.comedited /https (+512) "paul since 2012-01, guessing aaronpk since 2013, some reasons for Level 3 including privacy per Tim Bray post, added him there too" (view diff)