#dev 2017-12-07

2017-12-07 UTC
plindner and KartikPrabhu joined the channel
#
www.boffosocko.com
edited /theme (+59) "links to see also"
(view diff)
AlanPearce[m], eli_oat[m], TheGillies, myfreeweb, grantcodes, zoglesby, schmarty, mindB, jjuran, [chrisaldrich], [kiai] and snarfed joined the channel
#
loqi.me
edited /email (+187) "tantek added "2017-11-30 Katie Notopoulos / BuzzFeed [https://www.buzzfeed.com/katienotopoulos/i-tried-emailing-like-your-boss I Tried Emailing Like A CEO And Quite Frankly, It Made My Life Better]" to "See Also""
(view diff)
[miklb] and j12t joined the channel
#
aaronpk
arg gotta fix that silo.pub bug
[mrkrndvs], renem, eli_oat, snarfed, [chrisaldrich], tantek, tantek_, [keithjgrant], Kongaloosh, [miklb], jjuran, cweiske, [xavierroy], j12t, wagle and jeremycherfas joined the channel
#
jeremycherfas.net
edited /pronoun (+142) "/* See Also */ The sage continues"
(view diff)
[mrkrndvs], tantek, j12t, jeremych_, loicm and trafaret1 joined the channel
#
trafaret1
hi there
#
jeremych_
Hello
#
trafaret1
jeremych_: what is this group about?
#
Zegnat
This is the companion channel to #indieweb for discussion development related questions. See https://indieweb.org/ :)
#
jeremych_
Thanks zegnat
#
trafaret1
communist movement in web-dev world?
deathrow1, [mrkrndvs], [xavierroy] and deeden joined the channel; trafaret1 left the channel
#
sknebel
Zegnat: that sounds wrong
#
Zegnat
The indieauth thing? Yeah
#
sknebel
what exactly is happening?
#
Loqi
[sknebel] #152 Error with relative rel="authorization_endpoint" URLs
#
Zegnat
Everything worked, until I was sent back from my endpoint to indieauth and it would just tell me “There was a problem!”
#
Zegnat
But changing from a relative URL to a full one seems to have fixed it
#
vanderven.se martijn
edited /IRC_People (+1) "Upgrade Zegnat to HTTPS."
(view diff)
#
Zegnat
Also, we may need a way to make https://indieweb.org/Template:irc_user HTTPS compatible. Lots of open locks on /IRC_People
#
Zegnat
Oh, minor edits go to IRC now too?
#
vanderven.se martijn
edited /multi-site_indieweb (+1) "Martijn is moving to HTTPS"
(view diff)
#
Zegnat
That should be all vanderven.se links converted.
#
Loqi
ok, I added "https://securityheaders.io/" to the "See Also" section of /security
#
loqi.me
edited /security (+30) "Zegnat added "https://securityheaders.io/" to "See Also""
(view diff)
#
Zegnat
CSP << [https://addons.mozilla.org/en-US/firefox/addon/laboratory-by-mozilla/ Laboratory], a Firefox add-on that allows you to record / change / test CSP on live websites.
#
Loqi
ok, I added "[https://addons.mozilla.org/en-US/firefox/addon/laboratory-by-mozilla/ Laboratory], a Firefox add-on that allows you to record / change / test CSP on live websites." to the "See Also" section of /Content-Security-Policy
#
loqi.me
edited /Content-Security-Policy (+167) "Zegnat added "[https://addons.mozilla.org/en-US/firefox/addon/laboratory-by-mozilla/ Laboratory], a Firefox add-on that allows you to record / change / test CSP on live websites." to "See Also""
(view diff)
#
jeremycherfas
How important, in the grand scheme of things, do you think all of those are?
#
Zegnat
Those security things you mean? There are definitely reasons to have them, but those reasons are probably more pronounced on websites that offer a service to the visitor.
#
Zegnat
They can make the browser help protect against cross site scripting, click-jacking, and other such attacks against the users of your site.
#
jeremycherfas
Roght. Well, one to add, someday. But not today.
[andrea_arbogast, deeden and eli_oat joined the channel
#
sknebel
!tell aaronpk jeremy's http://www.fornacalia.com for some reason doesn't show parser output on pin13 (but does on e.g. php.microformats.io)
#
Loqi
Ok, I'll tell them that when I see them next
#
aaronpk
um, I can't view that page either
#
aaronpk
does it maybe only have an ipv6 address?
#
sknebel
unlikely
#
sknebel
I don't have ipv6 here
#
aaronpk
it's not resolving for me at home or on my server
#
aaronpk
I get no IP address for either www.fornacalia.com or fornacalia.com
#
sknebel
that'd explain that
#
sknebel
just not *why* you don't see it
#
aaronpk
I see dreamhost's servers are returning an IP address, but not sure why other servers aren't
#
aaronpk
8.8.8.8 and 9.9.9.9 don't have it
#
Zegnat
Yeah, that would seem to be the issue
#
Zegnat
`dig A +short @8.8.8.8 fornacalia.com` = empty
#
Zegnat
I seem to get it from my own default DNS though: `dig A +short fornacalia.com` gives 64.111.100.215
#
sknebel
I do too
#
sknebel
jeremycherfas: ^^^ apparently some kind of DNS issue
#
Zegnat
aaronpk I was getting errors before trying to login to the wiki with indieauth.com and my IndieAuth endpoint. Is there still an issue with relative endpoint URLs?
#
aaronpk
I didn't think so
#
aaronpk
feel free to file an issue with details
#
jeremycherfas
Very strange. Do you think I need to take this up with Dreamhost? Or wait and hope it resolves?
#
aaronpk
jeremycherfas: how long ago did you set up the domain?
#
jeremycherfas
Quite a while now. But I have only recently added content.
#
jeremycherfas
Or rather, resurrected content.
#
aaronpk
probably worth opening a ticket with dreamhost to see if they can find any problems
#
Zegnat
There you go aaronpk, since IndieAuth.com shows no logs or information this is the best I can give you: https://github.com/aaronpk/IndieAuth.com/issues/172
#
Loqi
[Zegnat] #172 Relative IndieAuth endpoint URL results in “There was a problem!”
#
sknebel
just tried a bunch of global propagation checkers, showing 1-2 locations failing, everything else resolving it fine
#
sknebel
Zegnat: anything odd about the url+params the redirect back to indieauth.com have?
#
aaronpk
i'm guessing it's a bug with trying to verify the link is there
#
Zegnat
Nope, code is there, me is there, and state is there
#
Zegnat
Might be, aaronpk. I didn’t really have time to go into IndieAuth.com source code to see what it is checking exactly.
#
Zegnat
Just noticed it when I was moving stuff to the new hosting to get HTTPS going. Thought I could switch to relative URLs because we got all the resolving bugs finished, and then couldn’t login to the wiki.
snarfed joined the channel
#
aaronpk
i'll figure it out
[kevinmarks] joined the channel
#
sknebel
aaronpk: since the ui looks the same on pin13 and php.mf.io now, I guess there is a public repo where I can file a bug for "give an error message if you can't fetch the document"?
Loqi, Ruxton, deeden and schmarty joined the channel
#
aaronpk
oops, looks like sknebel was on the other side of that netsplit with Loqi and there's a message in the logs that didn't make it over here
#
Loqi
[aaronpk] mf2-test: Small web page for displaying parsed microformats2
[eddie], myfreeweb, jeremych_, AlanPearce[m], eli_oat[m], grantcodes, zoglesby, plindner, TheGillies, schmarty1, mindB, snarfed and foo1 joined the channel
tantek, snarfed, AlanPearce[m], schmarty, grantcodes, eli_oat[m], zoglesby, plindner, TheGillies, mindB, [chrisaldrich], sebsel, j12t and raretrack joined the channel
#
aaronpk
hah I forgot about that auto-tweet
[mrkrndvs] joined the channel
#
@ChrisAldrich
Given @Livefyre's origin as a commenting platform along the lines of Disqus and Intense Debate, this photo of their current offerings from Adobe makes it sound a lot like what the Webmention open spec does for my WordPress-based website. http://boffosocko.com/2017/12/07/livefyre-sounds-like-webmentions/
(twitter.com/_/status/938881315872522240)
j12t, jalcine, j12t_, [andrea_arbogast and gRegorLove joined the channel
#
loqi.me
created /Gimme_Bar (+122) "prompted by gRegorLove and dfn added by [andrea_arbogast"
(view diff)
KartikPrabhu joined the channel
#
gregorlove.com
edited /Gimme_Bar (+244) "link dfn, note site-death"
(view diff)
#
gregorlove.com
edited /site-deaths (+543) "/* Upcoming */ Gimme Bar"
(view diff)
#
gregorlove.com
edited /Gimme_Bar (+332) "past tense, how to export"
(view diff)
#
aaronpk
good thing I already run https on my .dev domains :)
#
bear
it's going to catch a lot of folks by surprise
jonnybarnes joined the channel
#
Zegnat
I think we have spoken about it enough in here that most should know?
#
Zegnat
has switched to .test, which is a reserved tld
#
aaronpk
if you need an ssl cert for .dev: https://ssl.indieweb.org/
#
tantek
yet another reason to run Firefox :P
#
tantek
what is .dev
#
Loqi
It looks like we don't have a page for ".dev" yet. Would you like to create it? (Or just say ".dev is ____", a sentence describing the term)
#
Zegnat
Mozilla includes a different HSTS preload list?
[miklb] joined the channel
#
[miklb]
aaronpk I was never quite able to figure out how to use that for my local environment. Should probably revisit it
#
aaronpk
it takes a bit of work if you've never done it before
#
Zegnat
Another option might be https://laravel.com/docs/5.5/valet which sebsel pointed me at. It can setup HTTPS for local domains, or be configured to use a different TLD from .dev
#
Zegnat
(If you are on macOS that is.)
#
[miklb]
I’ve only used certbot so no, not much experience
#
loqi.me
edited /Gimme_Bar (+16) "gRegorLove added "[[Pinterest]]" to "See Also""
(view diff)
#
loqi.me
edited /Pinterest (+16) "gRegorLove added "[[Gimme_Bar]]" to "See Also""
(view diff)
#
sknebel
Zegnat: no, HSTS preload list is shared between all browsers, so this will happen everywhere unless the other browser makers decide make a special exception here, which will be troublesome as soon as .dev actually starts to get used
#
gregorlove.com
edited /namecoin (+157) "merge pros/cons from /personal-domain"
(view diff)
#
aaronparecki.com
edited /domain_name_registrar (+61) "/* Opinions/Recommendations */"
(view diff)
#
grant.codes
edited /Microsub (+228) "/* Clients */"
(view diff)
#
gregorlove.com
edited /personal-domain () "(-3054) /* Free Domain Names */ rm section"
(view diff)
#
aaronpk
grantcodes++ for Together, kind of neat to log in and have it full of content already!
#
Loqi
grantcodes has 5 karma in this channel (7 overall)
tantek joined the channel