#aaronpkwithout going back through all those posts in detail, i think there are two things happening
#aaronpk1 - people are misunderstanding indieauth which is mostly my fault and is taking me a long time to fix
#aaronpk2 - developers of things like gitea usually want an email address for users so that they can send notifications from the system, which has always been a pain point with OpenID even going back to the beginning
#[tantek]those are both good insights, except the part about mostly your fault - I think this is something we can share responsibility and help fix as a community, so if there are ways you can delegate pieces of it to help it along, please reach out!
#[tantek]the second in particular is *very* interesting. clients of SSO still want a way to notify users that use that SSO via (some) identity
#[Michael_Beckwitdon’t beat yourself up a lot aaron
#[tantek]we have been using "send a webmention to someone's home page" as an adhoc way of "notify someone", but perhaps that deserves formal specification
#[tantek]because then with IndieAuth you would get a built in way to notify someone
#[tantek]send a webmention to the URL they used to sign-in!
#KartikPrabhusounds like another overloading of webmention
#[tantek]KartikPrabhu that's precisely the use case of that
#[tantek]any service that wants to "send" notifications typically has a list of them that they are sending / have sent you on their own "notifications" page for you in particular
#[tantek]each of those notifications is itself is essentially a post
#[tantek]that mentions you by your home page, a person mention
#[tantek]thus sending you a webmention, thus the *sending* part of a notification
#KartikPrabhuoh well, sounds weird to me if my reader or some other app sent a homepage mention to say "you have 10 new articles to read"
#[tantek]that's a bit of a strawman as that's not really an interesting notification and I'd consider notification abuse (silos do that when you've ignored them a while)
#[tantek]presumably if it's a service you actually like / want to keep using they have some way to configure your notification references, i.e. what you see when you view your notifications page on that service
#aaronpkOne important aspect of those notifications is that they have to be private
#aaronpkalso from a practical standpoint, i don't want to require these developers to also understand and implement home page webmentions in order to use IndieAuth
#aaronpkalso because there is relatively little support for receiving and viewing these home page webmentions right now
#aaronpkI would much rather say here's how you can get someone's email address after they authenticate with IndieAuth
#LoqiIt looks like we don't have a page for "capability URL" yet. Would you like to create it? (Or just say "capability URL is ____", a sentence describing the term)
#LoqiThe Private Webmention protocol is an extension to Webmention that supports sending and verifying Webmentions for posts that require access control https://indieweb.org/private-webmention
#aaronpkI'd love to work towards a good long term solution but in the mean time I don't want to hold up adoption because we don't like email
#aaronpkWe've been through this one before. People don't always want to publish their email on their home page. Returning different content to authenticated requests ends up being a bit of work. At that point it's easier to return the email address as part of the IndieAuth response.
#aaronpkIn fact openid connect already defines an OAuth scope apps can request in order to request the user's email address, which we should probably just reuse
#aaronpk(The good news is as email deliverability becomes harder and harder, email becomes a less desirable notification channel, but we're a long way from it being irrelevant)
#[Michael_Beckwityou know you’re old when you were legitimately excited to receive an email, and it very likely wasn’t spam
#snarfed"if you build it, they will come" is kind of the opposite of scratch your own itch :P
[Michael_Beckwit joined the channel
#[Michael_Beckwita marketer’s dream, because they don’t have to do any work
#GWGWell, I've implemented things in the hope others would reciprocate, but so far, no one has suggested they need that yet
snarfed joined the channel
#GWGPersonally, expiring tokens is higher on my list.
[tantek] and [Michael_Beckwit joined the channel
#Ruxtonugh. move mailserver to new vps, upgrade mail server, something broken, no time for this, restore backup to new vps, still broke, change 2 host entres.. OH IT WORKS. shit, could of fixed that upgrade easily :(
#[Michael_Beckwitself hosted mail is one area i don’t want to attempt managing
#[Michael_Beckwiti’m kind of hoping that protonmail is a good alternative to the Googs
#jackymy thing was their lack of a native SMTP/IMAP setup since that's how I handle mail locally and on my phone
#[jeremycherfas]I like Fastmail, except for the inability to batch delete attachments but not the email they were attached to. Unless anyone knows differently.
#[kevinmarks]On the "generated forms" discussion, inkstone is an illuminating example - it has a customisable way to ass multiple form elements to the ui, but they do end up a bit generic.
krychu, jjuran and [kevinmarks] joined the channel
#[eddie]hmm aaronpk if I subscribe to two different feeds in the same channel, and one feed has truncated info and the other does not for the same post (same uid) do you know what will happen? Will I get two posts? will it be first come first serve or the one with more info?
#aaronpkright now aperture doesn't do any de-duping of content between sources
#aaronpki do want to solve it though, because right now i have a channel following a twitter search and also a twitter list, and i see duplicate tweets from a few accounts :)
#[eddie]because really, if you are fetching the canonical content, feed source is a lot less important
#aaronpkthe thing i want to avoid is having a situation where e.g. your website could claim to have a url that matches a post on tantek's website and override the content from that
#[kevinmarks]or the daring fireball thing where the url is the external site that you may also sub to
#aaronpki'm becoming less and less convinced that those "linkblogs" are something we want to model
#aaronpkat least, modeling in a way other than treating it as just a regular post with a link in the content
ingoogni, jackjamieson, snarfed, [kodepoeten], seblog, sebsel and [manton] joined the channel
#[manton]Micropub media endpoint question for folks: Micro.blog automatically creates a poster frame when a video is uploaded. I'm thinking of returning that somewhere in the media endpoint response. Is there any precedent for doing that either in JSON or in an extra HTTP header, e.g. X-Poster-Frame or something like that?
dougbeal|iOS joined the channel
#[manton]The spec says the response is undefined, although I do include some JSON for convenience, so I could put it there too. That would platform-specific and outside the scope of Micropub, I think.
#Loqi[Kickball] awesome-selfhosted: This is a list of Free Software network services and web applications which can be hosted locally. Selfhosting is the process of locally hosting and managing applications instead of renting from SaaS providers.
#[Rose](Posting in Dev, because I think the developers should be involved 😉)
#Loqi[Kickball] awesome-selfhosted: This is a list of Free Software network services and web applications which can be hosted locally. Selfhosting is the process of locally hosting and managing applications instead of renting from SaaS providers.
#[Rose]It's a very useful list for people looking to keep their data on their servers or under their control!