#tantekthedod: lol: "If you are using Microsoft Internet Explorer you may need to click on the yellow bar above and select 'Allow Blocked Content'. You must then click 'Yes' on the following security warning."
#tantekcome now, you can serve some plain HTML and not depend on JS for everything. ;)
#thedodtrying to webmention withnown I get [{'success': False, 'target': 'https://thedod.withknown.com/2014/webmentiondressing', 'explanation': 'Status code: 400, Response: {"error":"target_not_found","error_text":"The target page does not exist."}'}
#thedodAs one of the crusaders for a better CA-less world at https://hidden-id.github.io I agree that the CA system is broken, but an interim where 90% of the site need MITM and hanky panky in order to monitor can be quite itchy for the NSA
#Loqisecurity in the context of the indieweb may refer to security concerns regarding personal domains, web hosting, https setup, private data, identity etc http://indiewebcamp.com/security
#LoqiUpcoming, also known as Upcoming.org was (perhaps) the first social event sharing silo, then acquired and shutdown by Yahoo, and is now in the process of being recreated http://indiewebcamp.com/Upcoming
chrissaad, brianloveswords and lukebrooker joined the channel
#@tnext: * document tag-reply person-tag area-tag on #indiewebcamp wiki * post tag-reply a person-area on another's photo (ttk.me t4ZE4) (twitter.com/_/status/535688367527428096)
#ben_thatmustbemehey, i'm hoping to be able to test something out by the end of the day. can anyone easily create a note with an h-card embedded in it (not your own)
#reedstrmmichielbdejong: not sure where that leaves colos where you get a cage w/ your own key. They still do that anywhere?
#michielbdejongyes, you often see cages in data centers. I guess that's a bit of an edge case, and also financially not attainable for indiewebbers
#michielbdejongthat's probably more if you have 100+ servers
#reedstrmPersonally, I think Indie Hoster whould be 'anyone who considers themselves part of the Indie movement, and hosts themselves'. As described on the page, I'd call the new section 'Indie Friendly Hosters'
#aaronpkthere's a place in portland you can get a cage for only lik $500/mo
#aaronpkthat's not out of the realm of possibility, especially if you go in on it with a few friends
#reedstrmRecently had to rejigger severs at home (HD on the PDVR died) and was shocked at the amount of dustbunnies I had to clean out. I've been spoiled by works first class datacenter.
#aaronpkand how is that different from shared hosting?
#tanteksince you're *citing* the external like, comment etc.
#aaronpkright okay. i haven't forgotten all the things.
#tantekthis also solves thedod's concern about "if the class of an element has semantic reference, classes should be filtered from external input, or it's an attack surface" - because once you've contained it in an h-cite, you're good to go.
#tantekno need to filter classes from external input
#tantekin fact, don't filter them, or if you feel like filtering, at least *keep* all the uf2 prefixed classes (h- p- dt- u- e-) in order to maintain maximum semantic fidelity.
#tantekmichielbdejong: next, add yourself to indiewebcamp.com/irc-people !
#LoqiPrivacy is “the ability of an individual or group to seclude themselves or information about themselves and thereby express themselves selectively” http://indiewebcamp.com/privacy
#Loqimigration in the context of the indieweb refers to the process of moving your indieweb site from any one or more of one CMS / web host / DNS provider / URL design / domain name to another http://indiewebcamp.com/migration
#thedodlet's ask this: is there any reason, at the age of HSTS, to enable http connections *at all* for a site that can redirect to https?
#thedodExcept for "I know it's not OK, I'll fix this soon"
#thedodor maybe even go deeper and say any URL "known to have an https equivalent" should be converted *everywhere*?
#thedodI know "known to be" is a bit of handwaving, but - for example - sites can say in the header link rel=cannonical or something
#tantekthedod - I think you'll find that for many *practical* reasons, there's fairly strong consensus about use as much https as you can. See https://indiewebcamp.com/HTTPS#Why
#thedodall problems under "known problems" are bugs I can recreate
#tantekif you can't cite why something is known, then you can't claim you're avoiding *known* problems
#thedoddo you mean the formality is to blog about it and link there? I could do that.
#tantekyou shouldn't have to recreate them - if they're already *known*, they should have *existing* citations!
#aaronpkthedod: documenting the https login issue with the wiki was constructive because it pointed to a real problem. now I fixed it. so that was nice.
#tantekif it is *known* you should be able to cite *someone else* who has already written about it
#tantekthedod - great - then documenting it like you did was sufficient. no need to call it a "known problem" which asserts at least some degree of broader knowledge than just one person
#kylewmnot exactly a security problem, just a string matching problem
#tantekspeaking of HTTPS issues, I'm consistently getting "Safari can't establish a secure connection to the server "www.facebook.com". " (again, it was like this two days ago too)
#tantekKevinMarks: heh indeed. that would be the pithy response ;)(
eschnou joined the channel
#thedodtantek, I've read /Known [again] and I still don't get it: it's a platform (like my redwind), the only difference is that I *think* it was supposed to show all my tweets (and doesn't).
#LoqiTwister is a "fully decentralized P2P microblogging platform leveraging from the free software implementations of Bitcoin and BitTorrent protocols"[1] http://indiewebcamp.com/twister
#thedodWhat we do today is never forgotten (both google and NSA log what they can), but we're not *aware* of it. In twister, all your mistakes are in-your-face forever
#LoqiA platform in the context of software/services is a collection of related APIs/protocols/formats that can be used to build a site/app http://indiewebcamp.com/platform
#reedstrmthedod: bitcoin blipped into the mass media briefly this summer. during the silly/slow news season. Looks like it's back into techno obscurity to me.
#reedstrmThe new hotness is tap-to-pay-so-apple-can-track-me :-)
#thedodreedstrm, you have a point, but for far more complex reasons. e.g. bitcoin is mega-trackable
#thedodalso, the time to confirm a transaction (sometimes >1 hour) makes it unfit for coffee etc.
#thedodso Adi Shamir says it would become a currency for conversion, savings, and large payments
#ben_thatmustbemea mess up on my end had them coming in a generic "mentions"
cmhobbs joined the channel
#ben_thatmustbemewhich by the way tantek, you had asked a while back if anyone tracks mentions the the homepage URL, anything the system doesn't recognize as a comment/like/mention of a specific post, it just dumps to that "Recent Mentions" section on my side bar
#thedodbtw, speeking of generic mentions (and *what* they mention): at a blog there's "about", and "all posts". In twitter it's the same page, but "me" should be an "about" page. When you mention me you don't mention "stuff I've been saying lately".
#tantekso "recent mentions" = home page mentions + other 404 targets on your domain
#ben_thatmustbemenot 404 targets but other 200 targets that don't track comments etc, like my micropub client, search pages, etc
#ben_thatmustbemei never ended up fully testing that though since its rarely been used
#ben_thatmustbemeactually (upon reviewing it) its anything determined to be a "Mention" too, not in-reply-to
#breti accept bitcoin and dogecoin because sometimes people have them to give to me and it was super easy to add. That being said, I dont really use it that much
#tantekbret - do you have a payment page or something on your personal web site where you accept them?
#thedodbret, it's easier when you're not selling something. You just post an account number (maybe QR code).
#thedodThe problem is if you need to know whether the customer has paid or not. For that - each transaction needs a different account number
#thedodnow it's easy to generate them, but you need the private key (you keep at home)
#thedodso what people do is simply keep a "stack" of pregenerated accounts, and pop one per deal
#thedodYou can get DoSed out of all account numbers, but that's childish :)
#brettantek: i just have the addresses in my "elsewhere" section next my other rel=me's
#thedodhttps://en.bitcoin.it/wiki/Securing_online_services#Server_hacking By creating a wallet with plenty of keys on your own local computer and then uploading the encrypted version to the server, you ensure that whilst the server can accept payments only your own computer can make them, even though they share the same balance.
#bretyeah im not selling anything, at least, as a storefront
#reedstrmSo, can I just dump bitcoin into bret's account, and he can't tell who sent it?
#thedodreedstrm, maybe *bret* can't, but Adi Shamir has tricks ;)
#reedstrmthinks regularly scheduled anon payments matching external events that bret has nothing to do with ...
#tantekbret - perhaps you could document your technique for accepting Bitcoin on your personal site on a /Bitcoin page? And add yourself to a section "IndieWeb Examples" ?
#thedodthis is why it's only good for donations, because if you pay bret and I see the transaction I can go "hey bret I sent you money" at your expense
#ben_thatmustbemedamn, i was trying to work out some way to make tagging of people in an image work just by some markup in the commenter's post and javascript
#reedstrmSo, the real indie web interest might be hosters that accept bitcoin. Which exist.
#tantekreedstrm: that would also be worth mentioning on a /Bitcoin page
#ben_thatmustbemetantek, I know, I figured it would be more like a patch for those that didn't want to add server side patches, just include JS
#ben_thatmustbemeit was an exercise in creating the maps via js though
#thedodreedstrm, true that. if they also accept HiddenID, we can actually have anonymous indie sites :)
KevinMarks and gRegor` joined the channel
#ben_thatmustbemeno harm in investigating different ways about it, in any case I may set it up to include linking to sections of my photos via JS highlight / media-frag bit
#thedodtantek, "ethical" question. Indie are supposed to be personal sites. Now what if there's a community (knitting club, biker gang), how does their site appear on the "indie map"? can they have an h-card? webmentions?
#tantekthedod - I think the question has come up before, for independent businesses as well, and the general vibe I've seen is that anything that encourages at least some degree of independence is incrementally good
#tantekpart of the challenge is to not get "stuck" in thinking each site *does* have multiple people, because then you go down the Diaspora path, where people end up not having their own sites, care less, and stuff is lost / not maintained again.
#thedodwell, independence we don't lack. Our sysadmin is a "don't call us, we'll call you" kinda guy/girl
#tanteke.g. what happens when a couple with a shared "family" site gets divorced? how do they handle disentangling and maintaining web identities?
#tantekthus there's a strong encouragement to enable everyone to have and be their own
#thedodanyway, I guess the answer is "install the plugin and see"
#tantekI do know that Known itself is designed to be multiuser even on a single site
#tantekeach site/install has its own account system
gr0k joined the channel
#thedodben_thatmust, the problem with hiddenid is that the users are not 24/7 online. they need a "silo". On the other hand, they're less touchy about their "posessions" more careful not to be *accused* of saying stuff :)
#thedodthe way around this is that since they have SSO, they can put stuff in several silos, and [hopefully] aggregators will let you keep track of the "trail" they leave behind
KartikPrabhu joined the channel
#thedodit's indiewebcamp for people with a weak sense of self
#Loqicommunication in the context of the indieweb refers to using your personal website as a starting point and potentially way for people to communicate with you http://indiewebcamp.com/comms
#mkoDepends on what kind of decentralization we're talking about. If you're talking about moving to a distributed, decentralized peer-to-peer model, I wouldn't describe that as "IndieWeb" (compare The "Indienet" espoused by Ind.ie with the network of Independent Websites as espoused by IndieWebCamp).
#mkoDecentralization in the sense of removing the dependency upon silos and owning your own data is very much directly related to IndieWebCamp.
#mkoI would actually refer to the second one more as "Democratization" than "Decentralization" because it's more about who owns and controls the existence and flow of the data.
#mkoHosted Known, for example, is technically a "centralized" service in that everyone is using a namespaced instance on a central silo, but it is a more democratized service than silos like Facebook or Twitter as the users have significantly more control over their data.
#mkoNote: by "Hosted Known", I am specifically referring to the instances of Known hosted on withknown.com (i.e. https://mko.withknown.com and similar sites).
#reedstrmtempted to c&p irc log into the wiki page as a starting point :-)
#tantekwhen you click on a month, it loads the most recent posts in that month, and you have to scroll down (infinite scroll) to see earlier in that month
#tantekproblem with that is of course the usual infinite scroll fragility - JS - timeouts, long load times etc.
#tantekand all of this is done with JS - no separate links for archives for a year, nor archives for a month
#LoqigRegor` meant to say: Yeah, I really like the Facebook timeline thing for ease of going back in time, but dislike the JS/lack of permalink structure
#tantekwhich means if you ever click on something accidentally and navigate away, then navigate back, your entire scroll history / archive nav state is lost
#aaronpkOnce I refactor to not have the post type in the URL I look forward to having fully hackable URLs
#gRegor`I don't know if you can opt out of it, but what's displayed is based on FB privacy settings, of course. If tantek didn't have access to anything I posted in 2008, he wouldn't see 2008 listed in the years, I think.
#aaronpkI'm pretty happy with my month and date URLs already
ricmac joined the channel
#tantekgRegor`: uh - I think you might be giving FB too much credit
#Loqiarchive refers to date-grouped sets of indieweb site posts (a common form of navigation among posts), or a copy of a web page made at a particular point in time http://indiewebcamp.com/archives
#KevinMarksTwitter has downloadable year month archives eg kevinmarks.com/tweets
#tantekbut that's more of the *second* meaning of archive
#tantek"accumulation of historical records, or the physical place they are located.[1] Archives contain primary source documents that have accumulated over the course of an individual or organization's lifetime, and are kept to show the function of that person or organization."