#dev 2020-04-10
2020-04-10 UTC
TGiske, KartikPrabhu, flex14, dckc and [tantek] joined the channel
[Michael_Beckwi], [LewisCowles], [bonkerfield] and [Aaron_Klemm] joined the channel
# 
[Aaron_Klemm] Would anyone know how to reach the developers of the Indigenous iOS app? I have indieauth working on my domain and successfully logged into several sites with it, but I cannot proceed in this app as it gives the following error after I put in my domain: "Token Endpoint not found on "
[prtksxna] joined the channel
# 
[prtksxna] [Aaron_Klemm] It think it is maintained by [eddie] (but see https://indiewebcamp.slack.com/archives/C1PA11USK/p1586464941017200)
nickodd, [snarfed] and KartikPrabhu joined the channel
# [Aaron_Klemm] Bad news, but thanks for clarifying.
# [LewisCowles] maybe as we look to using more services and contributing back https://particular.net/adsd (currently free) might be of some help
# 
@bonkerfield I'm have my site sending #webmentions and pulling from twitter thanks to http://brid.gy and the #indieweb, thanks @snarfed and @indiewebcamp https://bonkerfield.org/2020/04/getting-so-so-social/ (twitter.com/_/status/1248482603226677249)
# @bonkerfield I'm have my site sending #webmentions and pulling from twitter thanks to http://brid.gy and the #indieweb, thanks @snarfed and @indiewebcamp https://bonkerfield.org/2020/04/getting-so-so-social/ (twitter.com/_/status/1248482603226677249)
# [LewisCowles] snarfed I'm not sure. The hypertext interconnected indieweb is definitely a distributed system Lessons and background free knowledge never harm, but I won't strong arm anyone into it
# [LewisCowles] RE: JWT. JWT's and all FE session get crazy big.
# [LewisCowles] One of our apps had a single auth-endpoint rather than a carrier token to each app, and we had to alter a strangler BFF (middleware) application to allow it to process > 16kb headers. I prefer backend session-based tokens
# 
@traderjosephina Can someone find the creator of this? This 18 second clip is better than thousands of 2hr films Ive seen https://twitter.com/unclesteveabbey/status/1248375149159518209/video/1 (twitter.com/_/status/1248442465234882561)
# 
jacky https://norde.io/ nice icon library project
[tantek], [prtksxna], [xavierroy], loicm, KartikPrabhu, swentel, jgmac1106, gxt, hs0ucy and deathrow1 joined the channel
loicm and [LewisCowles] joined the channel
# [LewisCowles] sknebel, you got a link?
# [LewisCowles] sknebel++
[Suw] joined the channel
# 
@dmitshur ↩️ Have you considered using IndieAuth (https://indieauth.spec.indieweb.org) which does the same now?
I’ve implemented it on my personal site (https://github.com/shurcooL/home/issues/34) and I’m very happy with it. Especially during GitHub outages. (twitter.com/_/status/1248596283536834560)
[schmarty] joined the channel
# 
[schmarty] sknebel: reminds me of ticgit https://github.com/jeffWelling/ticgit
[KevinMarks], vika_nezrimaya, flex14 and swentel joined the channel
# 
jeremycherfas !tell aaronpk I'm cleaning up some old notes to my7self and found something about being able to send an email to a specific address at `ownyourgram.com` that will then create a micropub request. I can't find anything like that in the docs. Did I dream it?
# 
aaronpk if you're logged in you should see info here https://quill.p3k.io/email
# jeremycherfas Hmmn. My note must be wrong. Let me look at Quill docs.
# jeremycherfas Yup, that is it. I wonder what made me write the domain down wrong. Not that it matters.
[Michael_Beckwi] joined the channel
jamietanna joined the channel
# 
jamietanna Is there any steer on what a Micropub server should do if trying to update a post that's been deleted?
# jamietanna Because the post still exists in my Git repo, I was thinking of allowing updates, as long as the client has the `undelete` scope
# jamietanna The spec doesn't seem to be 100% clear on what should be returned if a post you're trying to update isn't found - I would assume a 400 because the client is requesting something invalid?
# aaronpk yeah it's not unique to updates, all error responses are described here https://www.w3.org/TR/micropub/#error-response
vika_nezrimaya and nickodd joined the channel
# jamietanna Cool, ty for clarification!
# 
@apenwarr @aaronpk @dmitshur @bradfitz @skarra @evntdrvn @davidcrawshaw @rstropek @schlagfell @Tailscale If login were automated like credit card forms, it would fail about 50% of the time and need me to enter a page full of unnecessary personal information by hand. That’s not a good model. Why not let me enter an email address instead? That has a domain in it. (twitter.com/_/status/1248636365153218560)
# aaronpk this is also a great point: https://twitter.com/bradfitz/status/1248489373055631361
# 
@bradfitz @skarra @apenwarr @evntdrvn @davidcrawshaw @rstropek @schlagfell @Tailscale Yes, it used URLs instead of email addresses. It was ahead of its time. (Nowadays non-nerds people are more likely to identity with or share their Facebook or Instagram or Twitter or GitHub handle than an email) Relying Parties balked at not having an email address to spam with. (twitter.com/_/status/1248489373055631361)
# aaronpk why web sign-in << https://twitter.com/bradfitz/status/1248489373055631361 "Nowadays non-nerds people are more likely to identity with or share their Facebook or Instagram or Twitter or GitHub handle than an email"
# @bradfitz @skarra @apenwarr @evntdrvn @davidcrawshaw @rstropek @schlagfell @Tailscale Yes, it used URLs instead of email addresses. It was ahead of its time. (Nowadays non-nerds people are more likely to identity with or share their Facebook or Instagram or Twitter or GitHub handle than an email) Relying Parties balked at not having an email address to spam with. (twitter.com/_/status/1248489373055631361)
# 
Loqi ok, I added "https://twitter.com/bradfitz/status/1248489373055631361 "Nowadays non-nerds people are more likely to identity with or share their Facebook or Instagram or Twitter or GitHub handle than an email"" to the "See Also" section of /Why_web_sign-in https://indieweb.org/wiki/index.php?diff=69443&oldid=48240
[tantek] and [fluffy] joined the channel
KartikPrabhu joined the channel
KartikPrabhu joined the channel
[chrisaldrich], Lilz|BetaMeDisco, denzukoDiscord[m, chris[m], lamborghiniDisco, khalnayakDiscord, jolvera, placer141276[m], atj[m], daveatQCDiscord[, jessicaschilling, M4star3starDisco, lyon[m], kppDiscord[m]1, n9tDiscord[m], ZipperSKDiscord[, [schmarty], vika_nezrimaya, gRegorLove, [LewisCowles], OlegStotskyDisc4, MesaDiscord[m], sblinnDiscord[m], SpidermanDiscord, ambackDiscord[m], Canti0001[m], Mairkur[m], armaniferranteDi, ttocslliwDiscord, baluptonDiscord[, JonwelDiscord[m], gorhgorh[m]1, LuutheCoolDiscor, GiyomuDiscord[m], raulDiscord[m], celsoDiscord[m], virtual_vagrantD, andrewxhill[m], HaybalesDiscord[, pbvieDiscord[m], TristanDiscord[m, aaronpk[m], pvienhageDiscord, ithithDiscord[m], janttoDiscord[m], dy5es41Discord[m, anthony-albertor, skillman623Disco, bostaDiscord[m], macerbi[m], dhenz3SpeakDisco, JD9Discord[m], TianyiDiscord[m], felixschlDiscor4, jwheelerDiscord[, chmanieDiscord[4, amimDiscord[m], gmelodieDiscord[, doopDiscord[m], cesarosumDiscord, M011000100111010, Nebulous[m], distributedjoseD, pcowgillDiscord[, funwhilelostDisc, BossMANDiscord[m, JungleHeartDisco, jmank88Discord[m, nrtxrmndDiscord[, realChainDiscord, JorropoDiscord[m, drbh[m], matyas_mustohaDi, carsonfarmer[m], jimpick[m], DioBrandonDiscor, ritewhose[m], DreamingInCodeDi, mikealDiscord[m], snoopdoggydogDis, TimeOnDiscord[m], SenshiDiscord[m], SpicoliWhiteDisc, AXEL-Brian[m], Imnotsoimpressed, SnoochToTheNooch, ReallySnazzyDisc, sbpDiscord[m], KubeDiscord[m], olizillaDiscord[, prtfwDiscord[m], SuikaDiscord[m], XierumengDiscord, tobowersDiscord[, fexra|TRTLDiscor, hazDiscord[m], JustMaierDiscord, CyOp0x00Discord[, fozzie[m], mZ[m], HenniDiscord[m], arjanvaneerselDi, emersen234Discor, gunttedDiscord[m, mhzDiscord[m], M123897974564Dis, nebulerDiscord[m, aeddiDiscord[m], chmanieDiscord[m, godparticleDisco, chrisDiscord[m], raisDiscord[m], l^discordDiscord, RichardLittDisco, icaruszDiscord[4, aswiththewildDis, touzaikokonDisco, DavidFalconDisco, tplookerDiscord[, HyunwooLeeDiscor, CryptoEmpress[m], mikeal[m], thesage1014Disco, PermawebMatrixBr, kppDiscord[m], jmac and [dmitshur] joined the channel
# 
[dmitshur] lol Aaron.
nickodd left the channel
# [dmitshur] The ability to split identifier from means of contact is the biggest motivating reason for me. It provides a means to access user contact info if the user chooses to make it accessible. If I’m sharing an invite list, I’m more comfortable sharing 50 URLs than 50 emails.
# [dmitshur] It takes people a lot time to realize that (it took me a lot of thinking about it).
godparticleDisco, jessicaschilling, JungleHeartDisco, JD9Discord[m], raulDiscord[m], baluptonDiscord[, realChainDiscord, JorropoDiscord[m, CyOp0x00Discord[, tobowersDiscord[, M011000100111010, SnoochToTheNooch, SpidermanDiscord, JustMaierDiscord, distributedjoseD, touzaikokonDisco, cesarosumDiscord, MesaDiscord[m], SpicoliWhiteDisc, olizillaDiscord[, dhenz3SpeakDisco, hazDiscord[m], anthony-albertor, mhzDiscord[m], matyas_mustohaDi, LuutheCoolDiscor, kppDiscord[m], pcowgillDiscord[, gorhgorh[m]1, ttocslliwDiscord, M123897974564Dis, daveatQCDiscord[, TimeOnDiscord[m], funwhilelostDisc, l^discordDiscord, sbpDiscord[m], GiyomuDiscord[m], chrisDiscord[m], icaruszDiscord[4, nebulerDiscord[m, bostaDiscord[m], XierumengDiscord, jwheelerDiscord[, celsoDiscord[m], OlegStotskyDisc4, amimDiscord[m], SuikaDiscord[m], fexra|TRTLDiscor, ambackDiscord[m], TianyiDiscord[m], dy5es41Discord[m, armaniferranteDi, arjanvaneerselDi, BossMANDiscord[m, denzukoDiscord[m, RichardLittDisco, mikealDiscord[m], DreamingInCodeDi, JonwelDiscord[m], jmank88Discord[m, gmelodieDiscord[, tplookerDiscord[, emersen234Discor, felixschlDiscor4, pbvieDiscord[m], chmanieDiscord[m, nrtxrmndDiscord[, TristanDiscord[m, Imnotsoimpressed, KubeDiscord[m], HyunwooLeeDiscor, SenshiDiscord[m], gunttedDiscord[m, sblinnDiscord[m], ReallySnazzyDisc, DavidFalconDisco, HaybalesDiscord[, HenniDiscord[m], raisDiscord[m], aeddiDiscord[m], pvienhageDiscord, janttoDiscord[m], doopDiscord[m], snoopdoggydogDis, virtual_vagrantD, prtfwDiscord[m], aswiththewildDis, DioBrandonDiscor, ithithDiscord[m], skillman623Disco, chmanieDiscord[4 and thesage1014Disco joined the channel
# @dmitshur ↩️ The original tweet was asking about making it _possible_ to use a product without requiring third-party account, which I think is what IndieAuth enables. It's not a goal to require everyone to use it. E.g., most people still sign in to my site via GitHub, and that's fine with me. (twitter.com/_/status/1248677212439613441)
[snarfed] joined the channel
# 
KartikPrabhu [dmitshur]++ nicely put
# [dmitshur] I agree WebAuthn has a better chance of being friendly to mass adoption by non-technical users in the long term. But for now I enjoy using IndieAuth for my needs and I see WebAuthn as a tool I can use for hardening security via an additional factor.
# 
Zegnat https://webauthn.io/ is one nicely designed site
moppy joined the channel
SenshiDiscord[m], M123897974564Dis, SpidermanDiscord, yjhmelodyDiscord, reddDiscord[m], RomaricDiscord[m, sekiDiscord[m]1, drbhDiscord[m], zcopleyDiscord[m, JoejoeDiscord[m], pierreboc[m], MisterGoreDiscor, HeysteinDiscord[, swentel and ben_thatmustbeme joined the channel
# 
gRegorLove aaronpk, ouch about the cc fraud through your credit card form. Does Stripe have velocity filters? With Authorize.net some clients have set theirs to only capture up to X transactions a day, all the rest are only authorized
# aaronpk not that i can find, at least not without upgrading to this https://stripe.com/radar/fraud-teams
# gRegorLove Did you remove it from the /pay page? Only seeing Square, Venmo, Paypal
# gRegorLove Cool, yeah was going to suggest their new-ish Stripe-hosted Checkout
# gRegorLove I figured theirs has better support against automated POST requests
# gRegorLove Ah, gotcha
[chrisaldrich], moppy and [fluffy] joined the channel
# 
@skarra ↩️ I did not read it thoroughly, but indieauth looks interesting. Is there a 240 char summary of how it's diff from putting together OIDC discovery+dynamic client reg specs? :+) (twitter.com/_/status/1248707963121848322)
# @apenwarr ↩️ Just to be extra clear, I'm not opposed to indieauth here. I think it's a great core idea and I really want them to make it over the finish line.
But I just don't think pasting URLs into text boxes is it. (twitter.com/_/status/1248713497237741568)
loicm joined the channel
Giske joined the channel
[fluffy] joined the channel
[KevinMarks] joined the channel
# 
@kevinmarks @apenwarr @evntdrvn @dmitshur @aaronpk @bradfitz @skarra @davidcrawshaw @rstropek @schlagfell @Tailscale Well, we could revive another Brad project and convert profile names to urls with SGNodeMapper Meanwhile ~20 other people called Kevin Marks manage to register for services with my email address and I get their flights, bank statements and in one case divorce papers. (twitter.com/_/status/1248732551470080001)
[schmarty] joined the channel
# [schmarty] lol at the idea that IndieAuth means copy-pasting URLs. Good thing usernames and emails are always simple to remember and type! :zany_face: