#dev 2023-07-14

2023-07-14 UTC
bret, tei_, wagle, vilhalmer, [Ana_R], Aidhan, superkuh, [jacky], IWSlackGateway, [KevinMarks], m2m, gRegor, paulrobertlloyd and gRegorLove_ joined the channel
#
paulrobertlloyd For a URL source query on a Micropub (media) endpoint, that is a request to get information about a published post/uploaded file, if no file can be found, should the endpoint return a 404 Not Found, or a 200 Success with an empty JSON object? I’ve been doing the former, but wondering if that’s right.
sivoais, tei_, IWSlackGateway and paulrobertlloyd joined the channel
#
paulrobertlloyd Oh wait, looking at the spec, I seemed to have missed the example: https://micropub.spec.indieweb.org/#error-response I should be returning a 400 Bad Request.
tei_1, m2m, tei_, geoffo, AramZS, btrem, gRegorLove__, gRegor and eitilt joined the channel
#
aaronpk ugh, Meta starting to implement activitypub and wanting to interop with mastodon means there will essentially always be a fork in the HTTP Signatures spec now vs the new nearly final IETF HTTP Signatures spec
#
aaronpk I wish there was a way to convince Mastodon to switch to the new version
#
gRegor !standards
#
Loqi http://xkcd.com/927/ http://imgs.xkcd.com/comics/standards.png
[snarfed] joined the channel
#
[snarfed] that problem was pre-existing and seems unrelated to Meta/Threads specifically though, right?
#
[snarfed] also ugh, I commiserate, https://github.com/snarfed/bridgy-fed/issues/430#issuecomment-1510537265
#
Loqi [preview] [snarfed] conclusion seems to be that the fediverse is still generally on cavage v12 at most, and hasn't migrated to httpbis yet. - https://socialhub.activitypub.rocks/t/state-of-http-signatures/754/22 - https://socialhub.activitypub.rocks/t/http-signatures-...
#
aaronpk well, it's a preexisting problem but once another major player implements it it will be even harder to fix
jackh joined the channel
#
epoch I stopped verifying signatures
#
aaronpk 😬
#
aaronpk i mean that's one way to handle it 😂
#
epoch I still have to generate signatures though
#
epoch and I'm using whatever mastodon accepts. >_>
#
epoch is there a page that shows just the differences between the two versions?
#
aaronpk hahahaha
#
Loqi hahahaha
#
shreyan[m] loqi you Alright
#
epoch is the difference the whole thing?
#
aaronpk well there is actually a page that shows the differences
#
aaronpk https://author-tools.ietf.org/iddiff?url1=draft-cavage-http-signatures-12&url2=draft-ietf-httpbis-message-signatures-17&difftype=--html
#
aaronpk https://media.aaronpk.com/2023/07/14121352-9871.png
#
aaronpk words in common include: "HTTP", "is", "the", "signature" 😂
#
epoch nice
#
epoch guess I've got a decent amount of reading to do
#
[snarfed] trying to grok this: https://werd.cloud/ActivityPub+API+service
#
epoch oof. 20 pages vs 120
#
aaronpk [snarfed]: sounds like https://github.com/aaronpk/Nautilus if I were to run it as a service in the Cloud
#
Loqi [preview] [aaronpk] Nautilus: Turn your website into an ActivityPub profile
#
[snarfed] maybe?
#
aaronpk it manages the AP parts for you and gives you a simple API to it
#
[snarfed] ah sure
#
epoch looking into what the "@authority" value is supposed to be if the URL that was requested included a username and password in the "authority" section of the URL
#
epoch makes no mention of whether it is included or not, just talks about hostname and port
#
epoch returns to the tree
#
epoch trees*
#
epoch it references rfc 9110 though
#
epoch and /that/ says just host and port
#
epoch so, the http request's "authority" isn't always the same as the "authority" of a URL that caused that request it seems. -_-"
[tw2113_Slack_] and [KevinMarks] joined the channel
#
[KevinMarks] sounds like between people here we have a quorum for an AP test suite anyway
AramZS, geoffo and [tantek] joined the channel
#
[tantek] if multiple people are having to simplify ActivityPub "for developers" that's a strong case that there should be a simpler standard for developers to use instead, which is then Bridged to ActivityPub through one or more proxies. [benatwork] [snarfed] [aaronpk]
#
[tantek] is there a test suite for the IETF HTTP Signatures spec?
#
aaronpk sort of https://httpsig.org/
#
aaronpk you can at least use it to (manually) validate that your implementation matches