#indieweb 2026-01-12

2026-01-12 UTC
squidwizard, cptaffe, jeremycherfas, gRegor, cambridgeport90 and Ekul joined the channel
#
burgeonlab
Ekul, thank you for your compliment and checking my site. What's yours? (I'm on mobile IRC atm)
burgeonlab and gRegor joined the channel
#
Ekul
@burgeonlab++ you can find mine at http://ekul.me
#
Loqi
@burgeonlab has 5 karma over the last year
#
burgeonlab
omg. Your site loading and style is soooo cool!
cambridgeport90 and Ekul joined the channel
#
Ekul
Thanks a lot!
ajwatts joined the channel
#
ajwatts
I quite like both your sites - burgeonlab, you've put me onto the idea of weeknotes, which I'll start this week. :)
Steven[d], thegreekgeek_, Ekul, doesnm_ and WinnerWind joined the channel
#
burgeonlab
I'm flattered and thrilled that I got another person to start weeknotes—thanks for telling me ajwatts, what's your site? :)
cedric, [pfefferle], DanQ, sdk, madude, rainystorm, WinnerWind, srazkvt and coldfeet joined the channel
#
simpleauthority
Ekul, just looking at your Monster chart. You really do drink a lot of that stuff! Hahaha.
#
Loqi
hahaha
#
Ekul
@simpleauthority Oh yes, I am actually about to crack open another! LOL
coldfeet joined the channel
#
stillawakeat3am
Ekul: This is so damn cool!
#
Ekul
@stillawakeat3am cheers! 🔥
GuestZero, [KevinMarks], coldfeet, ax562, thegreekgeek, IWSlackGateway and [jeremycherfas] joined the channel
#
[jeremycherfas]
I finally bowed to the inevitable and removed the comment form from my website. These Russian spammers have been playing havoc with the site, despite it being behind Cloudflare and I just don't have the luxury of trying to discover exactly how they are doing what they are doing. Maybe over the next couple of days I'll find the energy to write up the experience.
jeremycherfas joined the channel
#
Ekul
@jeremycherfas I know you mentioned your site is behind Cloudflare, but unfortunately that alone doesn't stop sophisticated Russian/Chinese bots. Did you add a Cloudflare Turnstile to your form? That is a great way to put an end to them.
rickbol joined the channel
#
[jeremycherfas]
I did not. I need to read up about that. Thanks.
jjo left the channel
#
[jeremycherfas]
An additional problem is that because the spam hammers the RAM, making changes to the site often ends up with a 503.
btrem, [snarfed], Maker1, kebokyo, [social] and [Murray] joined the channel
#
[Murray]
We've found Turnstile works pretty well, though its localisation support is lacking and it can occasionally trip up assistive tech (its still _way better_ with the latter than more traditional Captchas though, so that's a win)
#
[Murray]
Oh and that's probably veering a bit close to dev 😄 sorry
indieweb-visitor joined the channel
#
solonovamax
tbh, I personally actually find cf captchas on websites to be *incredibly* annoying, and half the time when I see them I will just close the site if I don't care a lot about that particular site
#
solonovamax
if you have to use it at all, at least make it so the captcha isn't for the entire site and instead only required for submitting a comment, and not for viewing the site in general
#
[snarfed]
definitely an imperfect tradeoff
#
solonovamax
because whenever a site uses cf, I will constantly see captchas which waste like 30+ seconds of my time because I have a setting in my browser to isolate 3rd party cookies by 1st party domain (i.e. if A loads js from B which sets a cookie for B, if a site C loads js from B it won't be able to see the previous cookie), this is to prevent tracking but also leads to constant triggering of captchas
#
[Murray]
1000% agree on making the captcha only impact the actual form or section that matters. As someone who uses a non-Chromium browser, captchas always trigger for me too, and they suck 😄
kebokyo and rickbol joined the channel
#
[jeremycherfas]
The trade off for me is between making it easy to submit a comment or message me and overall site security. Thinking about it, I get so few non-webmention comments I could just remove that permanently. And it is easy enough to find my email and use that, without a form.
#
[jeremycherfas]
Forensically, I am interested in how the spammers avoid the CF “under attack” challenge and how they bypass my rudimentary honeypot. But I may never bother to find out.
#
[Murray]
Turnstile is useful because, in *most* cases, it requires no additional input by people. It can typically work out your not a bot just via how you fill out the form, so it should be as easy to submit as if it wasn't there at all. From our end, it has basically handled all spam on the sites we use it on, which include several fairly large NHS programmes that absolutely get search-driven traffic, and used to get a lot of spam
[aciccarello] joined the channel
#
[jeremycherfas]
I'm definitely interested if I can restrict it to the form alone.
madude and [tantek] joined the channel
#
[tantek]
I think email-only for non-Webmention comments is reasonable [jeremycherfas]
gRegor joined the channel
#
girlonthemoon
not sure where to ask this-- anyone know of sites/services that support login thru indieauth? i'm thinking like jamesg's artemis reader & pronouns.page
#
girlonthemoon
i'm curious
#
[tantek]
what is IndieAuth
#
Loqi
IndieAuth is a federated login protocol for Web sign-in, enabling users to use their own domain to sign in to other sites and services https://indieweb.org/indieauth
#
[tantek]
girlonthemoon, looks like https://indieweb.org/IndieAuth_clients is the page you're looking for
#
girlonthemoon
awesome, thank you [tantek]!
#
[tantek]
what is login thru indieauth
#
Loqi
It looks like we don't have a page for "login thru indieauth" yet. Would you like to create it? (Or just say "login thru indieauth is ____", a sentence describing the term)
#
[tantek]
login thru indieauth is /IndieAuth_clients
leahc2 joined the channel
#
btrem
I'm writing a quick how-to. And I have a question: is there a standard character to use to indicate a program menu item and sub-item? I'll probably use ` -> ` unless there's something better. Maybe a unicode character?
#
rkta
I'd prefer '->' over any unicode char.
#
rkta
Everybody has ASCII chars in their font, but maybe not all unicode chars.
[KevinMarks] joined the channel
#
[KevinMarks]
a bare > is also common
#
gRegor
Yeah I usually use a bare >
#
gRegor
If it's web and you control the font, I think unicode usually won't be an issue for characters like → if you prefer, though
#
gRegor
is now curious about accessibility with either option, e.g. screenreaders
#
rkta
assuming the user lets you control the font and uses a client that enables using different fonts.
#
btrem
I might just use the less than bracket. Thanks all.
#
btrem
rkta++
#
Loqi
rkta has 1 karma over the last year
#
btrem
[KevinMarks]++
#
Loqi
[KevinMarks] has 7 karma in this channel over the last year (32 in all channels)
#
btrem
gRegor++
#
Loqi
gRegor has 11 karma in this channel over the last year (123 in all channels)
#
btrem
My next question will have to go to #dev, lest I irritate Loqi. ;-)
DanQ, blacklight, coldfeet, duckito, leahc2, artlung, [artlung], barnaby, ax562, yashikru, CrimeWave and AcesAndEights8 joined the channel