KartikPrabhu, [mrkrndvs], moppy, jonnybarnes, swentel, joshproehl, VioletPixel, [Chaitanya], [James_Gallaghe] and jeremych_ joined the channel
#@witesAuralite is a new social network that's mindful of your attention and respects your privacy. There are no ads, there are no anonymous profiles, and bots are clearly labeled as such. It embraces open-standards such as RSS or webmentions. It's a social net… https://ift.tt/335drXq (twitter.com/_/status/1309818813752500230)
[LewisCowles], [James_Gallaghe], jeremycherfas, jeremych_, shoesNsocks, VioletPixel, Kongaloosh_, [chrisaldrich] and [schmarty] joined the channel
#LoqiIt looks like we don't have a page for "Auralite" yet. Would you like to create it? (Or just say "Auralite is ____", a sentence describing the term)
#ZegnatHe. I had both Auralite and Telepath popup in my reader today as new social networks. Same for you, Chris?
#sebbunhoizey, just test / benchmark all implementations, note their differences, choose one and fix the issues it might have (like useful features only available in another one)
#sebbuor make a new one that's standard and support what all others do :D
#[chrisaldrich]I suspect that simply by not amplifying fake news and meanness with algorithmic feeds, Facebook could be nice too, the problem is that wouldn't make money...
#aaronpkalso that sounds like an incredibly difficult moderation problem
#aaronpkbut for real, if anyone thinks they can start a new social network backed by VC money and *not* have it turn out like facebook and twitter, that's just delusional at this point
#aaronpki'm pretty sure tokens.indieauth.com will actually generate a token with no scope right now, so a client could already use it just for the login flow
#ZegnatI am just thinking that if a token endpoint is now also expected to be able to provide profile information, it is even harder to split it up... maybe.
#aaronpkit would just pass it through from the authorization endpoint
#aaronpkthe token endpoint would go verify the authorization code at the authorization endpoint, which would return the full profile information, so it would really just pass that response through
#ZegnatAh, true, it could just keep working as a pass-through, you are right
#ZegnatSorry for all the off-topic comments, aaronpk. Like I said, first time in a while I am critically reading it rather than looking for specific answers
#ZegnatI forget what we said at the popup, were we going to require S256 for IndieAuth? Just wondering because as written I think we allow for everything? And I seem to vaguely recall that we maybe did not wanted to support "plain"
#aaronpktrue because i said refer to PKCE for details
#aaronpki wonder if the disclaimer in PKCE is enough already though
#ZegnatYeah. So by my current reading plain is allowed, and is the default per PKCE spec. Was just wondering if we had decided to ban plain or not
#aaronpkand if we just always use S256 in the examples and such that might be enough to get the point across
#aaronpkmy worry is: 1) i don't want to _limit_ indieauth from using e.g. S512 in the future, and 2) I generally want to avoid adding additional things to the spec beyond OAuth if possible
#ZegnatWill leave that to your disgression. I think https://tools.ietf.org/html/rfc7636#section-7.2 also makes the case very clear, but I know from experience that people will not read that far into the RFC because they will look for implementation details and not the security considerations...
[Will_Monroe] joined the channel
#Zegnat"The resulting profile URL MAY be different from what the user initially entered, but MUST be on the same domain." in 5.3.2 and 5.3.3, is that outdated after the introduction of 8.1?
#ZegnatI think that might help all client developers a lot. More so than the link we currently have to Redirect Examples, which is only important for a small subset of service developers.
#ZegnatI wanted to be updated about manga updates, haha
#sebbumy main usage/requirement is retrieving the reading list, backuping it, then updating/syncing it myself
#sebbufor now, it's like [i set up dropbox syncing in moon+reader] "i read epubs/pdf/cbz in moon+reader" "i retrieve the positions from dropbox" "i retrieve my reading lists from the sites" "i update my reading lists with the new positions"
[michael_lewis] joined the channel
#[michael_lewis]Re Telepath "right now, the company doesn't really have a plan to make money, and the cost of growing and scaling its moderation before user numbers means it will have high costs up front" - I've seen that so many times now, and do you know what they'll almost certainly end up doing just like everyone else to monetise (and they will have to monetise with all their VC funding)? Advertising. And the consumer will become the product yet
#sebbui already support webnovel.com (main source of web/light novels), wlnupdates (good tracker site) and support for novelupdates is incoming (big db)
lexly joined the channel
#aaronpk*whew* got those changes done just in time, they just published the talk videos today!
#sebbu(where i get the epub/pdf/cbz is out of scope of the project, but i *could* read tachiyomi's db or myanimelist's history to replicate new reading positions
#Zegnataaronpk: hahaha, I was wondering if the review rush would be related to that
#ZegnatI started watching your video at work yesterday but never made it all the way through
#Zegnat(Not because of the video, because of work.)
VioletPixel joined the channel
#[michael_lewis]Catching up with the earlier tags/keywords discussion, what I reckon happened is that a lot of people stopped using them because the SEO "experts" said they were a waste of time after Google stopped using them in their rankings, and Google did that because of all the "keyword stuffing" and the like.
#aaronpkZegnat: hehe yeah as I was working on the talk I realized I needed to get these changes done before the conference
KartikPrabhu joined the channel
#[michael_lewis]Anyway, if anyone's got any good ideas for how to help with new personal websites discovery, let me know, because I'm not convinced the current facets (including tags) on Browse Sites works that well. I added the Newest Pages as an alternative discovery mechanism, but again still not convinced that's the best answer either.
#sebbuyeah, and there's no standard of tags/keywords, meaning you must keep a similar/identical database
#sebbu(not a standard of specifying them, but a standard of what to use as tag/keyword, ie a name instead of another synonym, infinitive verb vs past participle, passive form or not, etc...)
KartikPrabhu and geoffo joined the channel
#GWGI need a list of things I need to update about my IndieAuth implementation now