#dev 2022-11-27

2022-11-27 UTC
#
[tantek] ^ "weird dude who writes raw HTML" HEY
#
[tantek] lol "static gen basin" yow
#
[tantek] I feel that's not really fair nor accurate as anecdotally the SSG folks that I know seem to be much more prolific about blogging about non-blogging things
#
[snarfed] not really fair nor accurate but still funny
#
superkuh Yep.
#
aaronpk "mobile git workflow" 😂
geoffo joined the channel
#
@brmassa ↩️ testando webmention aqui (twitter.com/_/status/1596673699477864449)
win0err joined the channel
#
@cagrimmett Personal #indieweb update: ✅ Sending and receiving webmentions ✅ Backfeeding mentions from other platforms via http://brid.gy ✅ Syndicating via RSS, JSON Feed, ActivityPub, and autoposting services ✅ Microformats and my representative h-card (twitter.com/_/status/1596726483661520902)
#
@cagrimmett Personal #indieweb update: ✅ Sending and receiving webmentions ✅ Backfeeding mentions from other platforms via http://brid.gy ✅ Syndicating via RSS, JSON Feed, ActivityPub, and autoposting services ✅ Microformats and my representative h-card (twitter.com/_/status/1596726483661520902)
sebbu2, [fluffy], tiim, jjuran, mro and Nuve joined the channel
#
@SaphireLattice ↩️ @SwiftOnSecurity Possibly implementing some of the https://indieweb.org/ stuff? Especially webmentions, I would s… https://twitter.com/i/web/status/1596576571577573377 (twitter.com/_/status/1596576571577573377)
mro, sp1ff, mro_, chrisaldrich, tiim, geoffo, gxt, jacky and [ender] joined the channel
#
[ender] hi! can you make a knowledge graph using microformats? I want to create a personal search engine for my site and I know that Google uses structured data to display rich search results, idk how though
#
jacky [ender]: no reason one couldn't!
#
jacky I've been slightly interested in that - mainly for building a "today I learned" thing on my site as a personal wiki/journal of sorts
#
IWDiscordRelay <c​apjamesg#4492> [ender] I have a search engine on my site!
#
IWDiscordRelay <c​apjamesg#4492> It's not exactly a knowledge graph but I could add a feature that extracts answers from a post to give something more direct.
#
IWDiscordRelay <c​apjamesg#4492> I also have a "related articles" section on my blog posts that helps connect content too!
#
IWDiscordRelay <c​apjamesg#4492> (jamesg.blog/search/ and the related articles are on every blog post)
#
[ender] oh, i love that 🙂 also i like coffee more than most people so i relate to your content
#
[ender] how do you ask people to do interviews on your blog? (not strictly tech related) i think that is cool
#
IWDiscordRelay <c​apjamesg#4492> Mainly reaching out via Instagram. I have found people in the coffee industry to be super nice!
[marksuth] and [jamietanna] joined the channel
#
[jamietanna] Snarfed I love that you replied, via your site, to a post on the Mastodon server Indieweb.social's syndicated copy of a post of my own site 😂 https://snarfed.org/2022-11-26_jamie-tanna-i-dislike-how-effective-taking-indieweb-social enjoy that it's a little "the long way round" but works nicely, and bridgy-fed makes it so seamless
#
Loqi [Ryan Barrett] Yeah this may be complicated for work/life balance, but it’s definitely pretty baked into the way our minds work. Jonathan Blow describes this really well. Also reminds me of this.
mro joined the channel
#
[ender] does the h-card for a site need to be on the homepage of the site (`index.html`) ?
[capjamesg] joined the channel
#
[capjamesg] You can put a h-card anywhere but usually your main one will be on your home page.
#
[capjamesg] I link to my home page with some microformats to indicate it represents I am the author of a page in my blog posts so that tools could discover my h-card from an article.
#
[capjamesg] You can also put your h-card on every page!
mro joined the channel
#
jacky I've been curious about protecting Micropub requests (like preventing someone from just picking up a token and sending over requests to my server)
#
jacky I have a lot of stuff in place to reduce the chances of it but that's limited
#
jacky I've been eyeballing HTTP Signatures from afar and haven't seen a 'formal' form of it but I'm curious if that could be some sort of thing to help tighten requests
#
[capjamesg] [ender]++ for working on a h-card on your website!
#
Loqi [ender] has 1 karma over the last year
mro, [Michelle_Moore] and [aciccarello] joined the channel
#
[ender] I put this at the top of every page:
#
[ender] ```<link rel="webmention" href="https://webmention.io/enderverse.org/webmention" />
#
[ender] I'm still not sure how to send or receive mentions? I'm not sure whether you need to send mentions from a server or whether it can be done client-side.
#
[ender] <link rel="pingback" href="https://webmention.io/enderverse.org/xmlrpc" />```
#
[capjamesg] Great question!
#
[capjamesg] Webmention.io will receive your webmentions.
#
[capjamesg] I'll send you one now.
#
[capjamesg] I just sent one to you.
#
[capjamesg] Your webmention.io/dashboard page should show you my mention in a few seconds.
#
[capjamesg] Then, it's your responsibility to show that mention, if you so choose. I show mentions on my blog posts but not on most other pages.
#
[capjamesg] Sending a webmention involves sending a HTTP request to someone's webmention endpoint.
#
[capjamesg] The meta tag you added lets someone discover the endpoint so they know where you should receive your webmentions.
#
[capjamesg] I used https://telegraph.p3k.io/ to send the webmention to you. My blogging software sends them automatically but that is sometimes a bit slow (I don't know why) so I sent this one manually.
#
[capjamesg] Thus, you can indeed send a webmention client-side.
#
[ender] I'm so glad I asked, I was not going to discover that 🙂
#
[capjamesg] Do you know Python [ender]?
#
[jamietanna] Jacky imo signatures (at least based on cavage-10, the last iteration I read, and very out of date now) don't save you from someone stealing / having credentials, it just saves replay of a given request. If someone's got your token they could re-generate the signatures. Or actually are you thinking that each Micropub client would have a signing key, maybe per-identity, that they'd need to use to sign requests?
#
aaronpk dont bother making stuff up with http signatures. the http group is almost done with the new version, and the oauth group will likely be writing a profile of it to use with oauth, at which point we can adopt it for indieauth
#
[snarfed] jamietanna++ right. jacky you have to be able to maintain some secret credentials somehow, and that problem doesn't really change for passwords vs tokens vs private keys (eg for http sigs)
#
Loqi jamietanna has 7 karma in this channel over the last year (13 in all channels)
#
aaronpk what jacky is looking for is called "proof of possession", which means the token by itself isn't able to be used alone, only the software that the token was issued to should be able to use it
#
aaronpk the best way to do that is with a hardware-backed key, that way the private key isn't able to be exported at all. with an exportable key, it's better than nothing but ultimately just shifts the problem from worrying about stealing the token to worrying about stealing the private key
#
aaronpk http signatures is one way to use a private key to sign requests. another is DPoP https://oauth.net/2/dpop/ Neither are RFCs yet, but will be soon
mro joined the channel
#
sknebel software key mostly means you dont send the key over the wire, unlike a token. now the question is if you worry about that
#
[schmarty] snarfed++ for fed.brid.gy! took a couple of hacks with my current set up but i stumbled through and am successfully making follows and replies! fed.brid.gy++
#
Loqi fed.brid.gy has 1 karma over the last year
#
Loqi snarfed has 43 karma in this channel over the last year (81 in all channels)
jacky and mro joined the channel
#
capjamesg [snarfed] fed.brid.gy says "Next step to set up your site: add the .well-known redirects. "
#
capjamesg But the redirects work for me.
[timothy_chambe], Seirdy, tiim and geoffo joined the channel
#
@cagrimmett ↩️ I wonder if I can make a tool that will turn Jetpack likes into webmention-style likes, kind of how… https://twitter.com/i/web/status/1596730172136652801 (twitter.com/_/status/1596730172136652801)
#
cambridgeport90[ Now that would be cool. When I used to use Wordpress, I did have those settings enabled, but that was only so that others in the WP community could interact... as w3ell as to see stats on my site, but I could get that easily through something like SmarterStats. (Windows only, as far as I know for those that care.)