2017-05-09 UTC
gRegorLove_ joined the channel
# 00:27 aaronpk i have u-syndication there to the facebook event now
[kevinmarks], leg, [shaners], KartikPrabhu and voxpelli joined the channel
mbrock joined the channel
tantek, cweiske, amz3, barpthewire and loicm joined the channel
miklb, [kevinmarks] and loicm joined the channel
loicm__ and marcthiele joined the channel
loicm__ and [kevinmarks] joined the channel
leg, KevinMarks, arush, singpolyma, [eddie] and [chrisaldrich] joined the channel
tantek and j4y_funabashi joined the channel
# 15:07 j4y_funabashi Just been looking through the notifications page on facebook and they actually have lots of cool interactions
[andreasnebiker] joined the channel
# 15:13 j4y_funabashi Does anyone else have a page that lists all mentions received? I am starting with that before I add to posts and wondering how people mark that up
KevinMarks and gRegorLove joined the channel
# 15:50 aaronpk i don't think woodwind's pubsubhubbub subscriber is working
# 15:51 aaronpk it's returning http 204 but i don't see the posts
[jeremycherfas] joined the channel
# 15:58 myfreeweb ← yes i finally updated sweetroll :)
# 15:58 Loqi [Greg] Since 2017-02-01 I've been working on a big change to Sweetroll, the engine that powers this website, and today it's finally live, right here! (Also it's now on my newer VPS, hosted at prgmr and running HardenedBSD 11. The old one was FreeBSD 10 at D...
# 15:59 Loqi myfreeweb has 1 karma in this channel (16 overall)
# 16:09 myfreeweb lol i'm editing the wiki and i keep accidentally using markdown link syntax instead of the wiki one :D
# 16:09 myfreeweb btw noticed that the wiki doesn't support distributed indieauth?
# 16:09 aaronpk if you indicate an authorization_endpoint on your site, then indieauth.com finds it
KartikPrabhu joined the channel
# 16:10 myfreeweb i mean it uses indieauth.com instead of indiecert for me
loicm joined the channel
# 16:10 aaronpk you should be seeing the indiecert option listed on indieauth.com if you've configured it properly
# 16:11 aaronpk this is one of the super confusing things about indieauth.com
# 16:11 myfreeweb listed? oh it can do that? nice, that 's a cool feature. but it didn't work
# 16:11 myfreeweb maybe it can't read the link header?
# 16:11 myfreeweb woodwind and micropublish directly used indiecert for me
# 16:12 aaronpk i might have to double check the code on indieauth.com then, it looks like your site is set up right
# 16:13 aaronpk you should be seeing it as an option above github.com
KevinMarks joined the channel
arush and KevinMarks joined the channel
# 16:20 aaronpk myfreeweb: ah I see the problem, indieauth.com is only checking the HTML page for rels, it's not checking the HTTP headers
# 16:20 myfreeweb of course. you often do html only parsing :)
KevinMarks_ joined the channel
[shaners] and KevinMarks joined the channel
singpolyma and KevinMarks_ joined the channel
# 17:00 schmarty hoho, yikes! the link at the top of server-sent events goes to a page with "No one in the Web Platform Working Group is actively working on this specification. For the latest version of Server-sent Events use the WHATWG's Living Standard."
KevinMarks joined the channel
# 17:01 tantek schmarty - sounds like a good reason to fix the link?
KevinMarks joined the channel
# 17:30 aaronpk all the good "lock" and "auth" and "login" domains are taken
# 17:33 sknebel don't think so. searching a new name for indieauth?
# 17:33 aaronpk the other problem with "auth" is that it's short for both "authorization" and "authentication" and I want to clear that up as well
# 17:34 sknebel (to continue a pattern. and it sort of fits what the protocol does)
# 17:35 sknebel under the label zerologin it wouldn't match my expectations I think
# 17:35 myfreeweb yeah zerologin sounds more like one of those "passwordless" things like clef
# 17:35 aaronpk i want to run it on two domains, and make a few stylistic changes
# 17:36 aaronpk use case #1 is login-only, where software like the wiki doesn't want to deal with logging people in so it uses this as a service
# 17:36 aaronpk in this situation, the users logging in don't have a relationship with the service
# 17:37 aaronpk i want to also provide a way for the wiki using this service to brand the login page (or reduce the service's branding) so that it looks like it's part of that software
# 17:37 myfreeweb "The new OpenID", like "the new iPad" :D
# 17:39 myfreeweb LetYourUsersOwnTheirAuth dot org :D
# 17:39 tantek one of the reasons why I came up with "Web Sign-in"
# 17:39 tantek for exactly the use case of " where software like the wiki doesn't want to deal with logging people in so it uses this as a service"
# 17:40 sknebel (AuthThemAll? logthem.in? just added to GH issue)
# 17:40 myfreeweb DomainID… sounds bad but like BrowserID
# 17:40 aaronpk use case #2 is where users specifically delegate their domain to the service, which is much closer to the openID services that used to exist. this requires that users add a link to the service with rel=authorization_endpoint
KevinMarks joined the channel
# 17:42 sknebel although it doesn't really match for a service your *delegating* it to
# 17:42 myfreeweb if you separate these use cases into two domains, there might be confusion like "is this site using the same thing that i set up on my site"
# 17:42 aaronpk that use case is also beyond authentication and starts getting into authorization
# 17:44 aaronpk the wiki *does* support federation, it just does that by letting indieauth.com handle it
# 17:45 myfreeweb OpenID was one word that was used everywhere… people knew "this uses OpenID, my LiveJournal is an OpenID, i can log in here using it". so both domains should strongly refer to a common brand like… "Web sign-in" I guess
# 17:45 tantek myfreeweb, yeah that was my thinking too, with hopefully something more accessible than OpenID
# 17:46 tantek OpenID had the curse of both being too jargony, and too abstract
# 17:47 aaronpk i also want to avoid using the name of the spec/technology in the name of the service, because that's what got me in to this situation in the first place
[cleverdevil] joined the channel
# 17:49 tantek there were various different OpenID providers that had their own names
KevinMarks joined the channel
# 18:07 aaronpk Focusing both services on the "web sign-in" aspect is also good because that avoids conflating them with the IndieAuth protocol which is more OAuth than it is sign-in
# 18:12 dansup .in doesnt have whois privacy iirc
# 18:13 tantek .com is probably better rep etc for something auth/identity related
KevinMarks_, KevinMarks and tantek joined the channel
loicm and leg joined the channel
tantek, KevinMarks_, j4y_funabashi, KevinMarks and [kevinmarks] joined the channel
# 23:39 [kevinmarks] though both login and signin are jargon. Can we step back a bit and define this in less plumbing terms?
# 23:48 tantek kevinmarks - no. both "log in" and "sign in" are UX copy that is common UI across websites
# 23:48 tantek quite they opposite, they are a UI pattern that people in general are familiar with
# 23:48 [kevinmarks] yes, but that is exactly what we are trying to eliminate, as it implies email and password
# 23:49 [kevinmarks] you call it that and browsers helpfully autocomplete it and offer to save passwords
# 23:50 tantek yes you want browser to autocomplete your URL for you
# 23:59 tantek I came up with Web Sign-in because NYT recommendation to use "web address" in prose instead of "URL" as more widely accessible and understandable