#tantek__oh no now I'm wondering about /edit posts for editing labels themselves on a repo
#tantek__well I've got u-tag-of coded, and working with a *past* post (already POSSEd with Bridgy so it won't redo it)
#tantek__so now I just have to find another issue I want to add a label to (a label without spaces)
#tantek__or somehow figure out how to post hashtags/categories with spaces in them
#tantek__might have to do that anyway since GitHub Labels do allow spaces, and presumably I may want to add labels to a repo some day that I don't have permissions to "fix" the labels to not have spaces
#sixtwothree.orgedited /media_fragment (+644) "/* Spatial for area tags */ Add a flow for receiving and verifying webmentions using spatial dimension media fragment syntax" (view diff)
#LoqiAn area-tag is a special kind of tag that tags a specific area or region of a post which can be used to tag a photo post with person-tags at specific locations/areas where each person appears in the photo https://indieweb.org/area-tag
#tantek__which would then give us a good example to both person-area-tag and then POSSE such replies to Flickr too to propagate the person-area-tag to the Flickr copy of the photo
#Loqi[Jason Garber] Taken on February 24th, 2016 at 6:49 pm EST.
Homebrew Website Club 2/24/16 Group Photo
It’s just John and I tonight at Homebrew Website Club owing to a rather nasty storm moving through town. We’re making the best of it, though! https://assets.sixtwothree.org/uploads/photos/25/image_medium.jpg
#[jgarber]tantek__ Looks like there are Flickr API endpoints for the necessary notes actions:
#tantek__there might even be a Bridgy feature request for this, but it's pending on figuring out how to do it on the indieweb at all, and then at least an example of doing it!
DenSchub joined the channel
#dougbealhurm, what bits of indieauth log lines would need to be censored to prevent logins?
#GWGI'm trying to solve the unauthorized problem. Right now, my tokens, when verified, return with the WordPress user ID of authenticating user. Is there a danger in using that, as the transactions all happen internally?
#dougbealschmarty: kind of looks like secret has unencoded spaces, and they get returned encoded
#dougbealschmarty: though mabye the logging is just pre-encoding?
#dougbealIs there anything in the spec about state?
#aaronpkGWG: you can track the user associated with a token internally however you want, that's an implementation decision not something the spec cares about
#GWGaaronpk: That's what I thought. But doing that would eliminate 99% of the issues in mapping URL to username.
snarfed, loicm, [kevinmarks], [pfefferle], TripFandango, tbbrown, leg, mynamejedddddddd, iasai, [mrkrndvs], [jgmac1106], barpthewire and dougbeal|mb1 joined the channel
#skippyhow do IndieWeb pioneers envision the distribution of reposts in a non-siloed world? If I retweet something, it's because I want my followers to see something I dont think they'll see. Do IndieWeb folks distribute their reposts in their RSS feeds? (I dont, which is why I ask)
[jgarber] joined the channel
#[jgarber][schmarty]’s RSS/Atom feed includes all kinds of activity, including (if I recall correctly) reposts, likes, etc.
#[jgarber]What I’ve observed, though, is that the content of a feed item might be simply a heart (for a like) or in some cases an empty body. In order to see what he’s liked or shared, I click through to the page on his website.
#dougbealI repost something because I want to find it on my site
#dougbealThough thinking about it, a bookmark and archive.org save would work as well
#skippyI don't "like" stuff on social media, for a variety of reasons. I do repost, though. Obviously everyone has different motivations for how and why they do what they do; and that's a good thing.
#sknebelyeah, a repost IMHO implies the "broadcast to my followers", whereas a bookmark doesn't necessarily
#skippyi'm just trying to figure out what distribution of content would look like in a non-silo world.
#[jgarber]Not at all casting blame, aspersions, etc. but speaking only for myself, agreed: it’d be a nicer user experience to include (as a `<blockquote>` or what have you) some of the original, shared post.
#sknebelalternatively, that's a job for the consuming application (=reader), which of course is an issue with non-indie-readers
#skippyi would love my reader to fetch threads for me, so i dont have to click a source Tweet to see it all. but that's also arguably not a good use of developer time and energy given other things a reader needs to do.
#sknebeltrue, thats especially an issue for reposts from silos
#sknebelalthough something in the system has to do the work
#skippyaye. i was just wondering how a truly distributed (indie)web would present reposts for broader consumption. deduplication becomes a more importabt issue, too... If all the people i follow repost the same thing, I'll get bombarded with it. :(
#aaronpkskippy: my home page feed includes reposts, and I include the entire content of the post along with the author
#aaronpkthat provides good fallback behavior for consumers that don't understand the repost-of property, since it will look like a regular post
#aaronpkand for consumers that do understand repost-of, they can use that to dedupe/group reposts
#schmartyI should take a look at what aaronpk does. My site displays a summary of what I repost, marked up as an h-cite, but not even indie readers are showing those previews.
#aaronpkdougbeal: feel free to include that link in an issue if you file one
#skippyi need to figure out how to make my micropub endpoint properly handle retweets with original comments. used micropublish.net to repost with a comment; my site got it right, but the syndication to twitter only got the retweet.
[kevinmarks] and [chrisaldrich] joined the channel
#[kevinmarks]ops advice question: I need to rsync .pem files between machines to make letsencrypt work with shared hosts (I am going to need to script dns challenges and then copy them to the right places). What's the safest way to do this? A special user just for that cron to rsync as?
#aaronpkthere should be a way to avoid copying those around in the first place
#aaronpkthat approach paid off for me for dealing with XRay's certificate on appengine... eventually appengine built in letsencrypt support with a checkbox themselves
KartikPrabhu and [pfefferle] joined the channel
#[kevinmarks]I am happier keeping the certs on the apache machines rather than the load balancer, so I want to copy them; renewing by DNS challenge is fiddly enough that automating it makes sense; it's the cert copying that I'd like to work out easily.
#aaronpkwhy can't you issue the certs from the individual machines then?
#[kevinmarks]I was doing one cert for all 3, with the different domains in.
#[eddie]schmarty: “No even indie readers are showing those previews”, that’s not your fault, it’s the readers fault. If you are marking your post up with h-cite I believe we just need to finish rendering it properly
#sknebelI wouldn't scp as root, but scp as a unprivileged user and then trigger a script (which also could be a often-running cronjob, or a systemd filesystem watcher I guess) which moves the cert to a privileged location
#aaronpkoh yeah, thanks for the notes on that. I like the idea, just haven't dug into the code yet
#[jgarber]Certainly! I mentioned in the description it’s largely a setup for a follow-on piece of work that replaces parts of the client gem with the purpose-built webmention-endpoint-ruby gem.
#[jgarber]Split view on the PR might make for easier visualization.
KartikPrabhu, snarfed and gRegorLove joined the channel
#schmartydougbeal: i switched from base64 to hex encoding the state, so you should no longer see that particular error when logging into 🕸💍
#sknebelthe bug is captured somewhere to ensure it's fixed regardless?
#schmartynext time they visit the dashboard they'll get created in the db though
#[jgarber]I was able to get an emoji assigned to sixtwothree.org and see the dashboard.
#[jgarber]Although logging in a second time and I have the previous emoji plus a new one…
#[jgarber]If I get to claim an emoji combo for myself… 🔥 would be _pretty_ great.
#schmartyjgarber: yep, i now have it creating two-emoji chars for people (because folks were signing up before i had URL normalization, so lots of ending slash inconsistencies.
#schmartylet me know if you want your previous emoji and i'll just stick it in the db
#schmartyjgarber: haha, okay, the glitch console doesn't support entering unicode, so with some sqlite substr ✨magic✨ i think i was able to get your old 💓 emoji back
#aaronpkhm I was able to log in using indieauth.com fine
#schmartygRegorLove: try again from the homepage. i changed the state encoding because WP was mangling it, but it's stored with the old encoding in a cookie if you'd logged in previously.
#aaronpkoops guess I have to add the html to that site I just used to test with
#schmartyis having a great time making all these mistakes in public, haha
#LoqiIt looks like we don't have a page for "snitch-ring" yet. Would you like to create it? (Or just say "snitch-ring is ____", a sentence describing the term)
#schmartyokay! glad i was able to knock out some bugs today. thanks dougbeal, ryan339, jgarber, gRegorLove, aaronpk, and more! once i get the directionality nailed down i'll start in on some documentation and a "launch" write-up.