#dev 2021-07-01

2021-07-01 UTC
Seirdy joined the channel
#
samwilson I'm adding TOTP to my website. Makes it feel fully proper. :-P
#
GWG samwilson: Fun
#
GWG HWC right now, by the way.
#
samwilson oh now? groovy i'll join
Kaja_ and shoesNsocks joined the channel
#
GWG The discussion question in HWC was why are tickets short lived in ticket auth?
alex_, justache, chenghiz_ and alex11 joined the channel
#
aaronpk I was pretty sure that was documented on the wiki
#
GWG aaronpk: I don't see it
#
aaronpk hm I can't find it either
#
aaronpk but the reason is because you're sending something unsolicited to someone and it's safer to send something that is short lived and single use than sending the actual access token
sebbu, capjamesg, lanodan, Seirdy, hendursaga and jamietanna joined the channel
#
jamietanna jacky https://datatracker.ietf.org/doc/html/draft-ietf-oauth-incremental-authz may be of interest for the incremental authorization
#
jamietanna jacky I think it's a bit early in the morning but not quite sure I get what you mean re "what's the implication of having a specialized token and authorization endpoint"
#
jamietanna aaronpk I'm currently using `resource` indicators internally and bake them into my tokens, but it's currently unenforced in any of my services (as of now)
#
jamietanna I think it's nice with resource indicators because if a token were to be stolen / leaked, it's harder to use it against multiple services
#
jamietanna following the way that they work with the `resource` indicator in Ticket Auth would be good, as then we've got a well defined standard telling us how to handle URI paths
samwilson joined the channel
#
GWG I'm thinking of doing some editing on the ticket auth page
chenghiz_ joined the channel
#
GWG I was reading the autoauth spec and the private webmention spec and there is some explanatory language that might be helpful
#
GWG https://indieweb.org/Private-Webmention#why_is_there_an_extra_step_of_exchanging_an_auth_code_for_an_access_token
#
GWG This explanation is good for why a ticket as same principle
#
aaronpk aha *that’s* what i was thinking of!
#
GWG aaronpk: I figured
#
GWG Also the private webmention page mentions freenode, probably should search for any other freenode mentions
#
GWG I also reread the autoauth spec about how the client makes an authenticated request to the token endpoint to get the external token
joshproehl, capjamesg and Poorchop joined the channel
#
Poorchop has anyone ever tried to suggest that Automattic enable Webmention by default in WordPress? that seems to be how pingbacks gained any traction
#
Poorchop although I guess there's no easy way for them to automatically mark up submissions with microformats
#
GWG Poorchop: Yes, I did
#
Poorchop I'm guessing they weren't receptive
#
GWG Poorchop: More no uptake from the commiters
#
GWG I need to try to figure out 5.X of the Webmention plugin, which is stalled
#
Poorchop it would be huge for Webmention if Automattic would get on board
#
GWG Correct, there are pros and cons
capjamesg joined the channel
#
Poorchop since setting up mentions, I started noticing that most mentions on other sites were just likes and retweets or whatever from Twitter/Mastodon/micro.blog/Facebook/etc.
#
Poorchop kind of a bummer for those of us not on social media
#
GWG Poorchop: We need to get more people on Indieweb readers that can reply in the same app as the reader...it would help with that
#
GWG For example, people using Microsub are much more likely to respond with their site because it's one click
#
Poorchop I'm not too familiar with that stuff but even I wouldn't mind if sending a mention wasn't so cumbersome
#
Poorchop even with scripts to autogenerate things like likes and bookmarks, it's still a few steps to like something, push to my site, then go back and forth between browser and command line to paste links for sending the mention
#
GWG That's a good place to start iterating
#
GWG If you work to make something easier to do, people will do it
capjamesg, [tantek], [snarfed], KartikPrabhu, gRegor and [schmarty] joined the channel
#
[schmarty] pretty jazzed about https://www.manton.org/2021/06/30/opensourcing-the-microblog.html manton++
#
Loqi manton has 18 karma in this channel over the last year (25 in all channels)
#
Loqi [Manton Reece] Open-sourcing the Micro.blog apps
#
[snarfed] wow, that’s big indeed, manton++
#
Loqi manton has 19 karma in this channel over the last year (26 in all channels)
[jacky] joined the channel
#
[jacky] wait wait woah
#
[jacky] wow even making it MIT too
#
[jacky] congrats (to that launch) [manton]++
#
Loqi [manton] has 20 karma in this channel over the last year (27 in all channels)
[KevinMarks] joined the channel
#
[KevinMarks] https://twitter.com/philipvollet/status/1410150982621843460?s=20
#
@philipvollet A clone version of Github Copilot. Instead of using AI, this extension send your search query to google, retrive stackoverflow answers and autocomplete them for you. @harishkgarg https://github.com/hieunc229/copilot-clone https://www.producthunt.com/posts/captain-stack https://pbs.twimg.com/tweet_video_thumb/E5HcvmfWEAEOzeg.jpg (twitter.com/_/status/1410150982621843460)
#
[jacky] lmfaoo
#
[tantek] [manton]++ wow! Congrats. Now who's going to update all the articles about the micro.blog apps to note that they're now OSS? 🙂 citation: https://www.manton.org/2021/06/30/opensourcing-the-microblog.html
#
Loqi [manton] has 21 karma in this channel over the last year (28 in all channels)
#
Loqi [Manton Reece] Open-sourcing the Micro.blog apps
samwilson, [Murray], [aciccarello] and gRegor joined the channel; Poorchop left the channel