lionzanmsg aaronpk Hi! I managed to have webmention inside S3-Website running with no errors. it says it sends 4 webmentions, but they don't appear on the klinked posts... see my post her http://lionzan.me/2014-05-25/testing-webmentions/
nloadholtes, barnabywalters, jonnybarnes and LauraJ joined the channel
tantekI feel like we should split level 4differentiate https support that works without a warning triangle (i.e. you get a lock), vs. https support that doesn't cause an alert, but still causes a warning triangle next to the URL in the address bar
tantekthen perhaps we should bump the existing level 5 to level 6, and introduce a new level 5 which is level 4 + no warning triangle (e.g. no mixed mode warnings)
tantekseems to make more sense to put this new level there (at 4.5 between existing 4 and 5), rather than at 3.5 (between existing 3 and 4), since sending redirects from http to https is both easier, and worthy of doing even with the warning triangle.
tanteksnarfed - oh neat - thanks! looks like that 2012-12 post is about reaching level 4 (serve everything over https), and 2013-11 he reached grade "A" on the SSL Report
tantek!tell lionzan go ahead and !tell aaronpk your actual message or question instead of presence querying. It's bettter for everyone here (and someone else might be able to answer your question).
Loqilionzan: tantek left you a message 53 seconds ago: go ahead and !tell aaronpk your actual message or question instead of presence querying. It's bettter for everyone here (and someone else might be able to answer your question).
kylewm!tell lionzan small tip on the microformats markup on your site -- if you move the author image inside your h-card, parsers will be able to pick it up
jonnybarnesso client_id, trying to get my head round it, my thought at the moment is actually saving access tokens on my site, i.e. I'd love to be able to go to /admin/tokens and be presented with a list of all the tokens I've generated, i.e. it could list one for ownyourgram and one for waterpigs.co.uk etc
jonnybarnesbarnabywalters: so if my access tokens are random strings, and server side those random strings have metadata associated with them (currently thinking simple files as oppose to db) then having a file of that random string is how I know its an authenticated request, and then I could say in my UI, this partiuclar post was posted by `client_id`
barnabywaltersnote that there’s no guarantee that the client ID will actually be the URL you’re posting from, or even the same domain. But it will be the URL your authorization endpoint shows you
tantek.comcreated /Upcoming (+2755) "plenty of links here, time to create it. stub with dfn, site death, domain return, notability to indiewebcamp" (view diff)
tantek!tell jonnybarnes when did you start serving everything on your site with https? Do you remember when you flipped the switch? (i.e. to redirect all your http to https)
Loqijonnybarnes: tantek left you a message 2 minutes ago: when did you start serving everything on your site with https? Do you remember when you flipped the switch? (i.e. to redirect all your http to https)
kylewmalmost... I am mirroring a lot of stuff locally (e.g., user pics), but there are some older posts where I embedded an image from an http that still give the mixed content warning
KartikPrabhuhow do you ensure that external content is over https? If I have an avatar for a comment from tantek it will be over http since he uses http
jonnybarnesKartikPrabhu: my solution to that particular problem is when I receive a webmention, I download the image from the hcard and display it myself
KartikPrabhuanother question: while linking to external posts shoudl I use "//example.com" too. The problem is that webmention receivers look for exact url match and target="https://example.com" won't match "//example.com" from my post source
tantek.comedited /https (+283) "/* Level 5 security */ dates for willnorris https level 4-5 support with citations, link user page for Peter, forward secrecy, bold headings" (view diff)
tantek!tell pauloppenheim when did you start using a cert from a trusted CA on your own site? Do you remember when you got the cert / installed it / made sure it worked for https://pauloppenheim.com/ ?
tantek!tell aaronpk when did you start using a cert from a trusted CA on your own site? Do you remember when you got the cert / installed it / made sure it worked for https://aaronparekci.com/ ?
Jeenasnarfed yeah my website does that but I don't want to save the likes in the same database structure as my notes and I don't want to show them in the same views, etc. it is mostly a UI question not so much a implementation question.
Jeenait is just because it is easier to handle in its own table, but moslty just because I didn't think of consolidating all those from the beginning and now I have different properties for different types of posts in the db. I would need to rewrite it and write migrations to rebuild the database structure and that is just too much work for now ^^
Loqipauloppenheim: tantek left you a message 15 minutes ago: when did you start using a cert from a trusted CA on your own site? Do you remember when you got the cert / installed it / made sure it worked for https://pauloppenheim.com/ ?
pauloppenheimfor many purposes SSL shouldn't be considered guaranteeing of privacy, but in my case it is possible to have somewhat better guarantees than i have now.
tantek.comedited /https (+512) "paul since 2012-01, guessing aaronpk since 2013, some reasons for Level 3 including privacy per Tim Bray post, added him there too" (view diff)