#dev 2023-10-23
2023-10-23 UTC
bret and [jacky] joined the channel
# 
[jacky] Was thinking about how to implement the interface for my projects (one day I'll be done) and this part stuck out to me for the dialog tag https://developer.mozilla.org/en-US/docs/Web/HTML/Element/dialog#caveats_of_creating_a_dialog_using_only_html
[aciccarello] joined the channel
# 
[aciccarello] The dialog element looks really nice to work with
# 
omz13 GWG I did not write a different protocol solution per se. I implemented *all* the components of "Ticket Auth" (viz. Ticket Wanted; Ticket Deposit; Ticket Grant). As there was no concrete specification, but instead a bunch of ideas and proposals floating around that were 90% there but somewhat theoretical in nature and very much not end-to-end, I made some implementation decisions. When implementing my end-to-end and real world solution I fully
# omz13 documented it as I went, and used appropriate terminology for the sake of my own sanity (because trawling through the various ideas and notes was not my idea of fun) and I called it "Ticketing" because "Ticket Auth" is not a good name; you'll find it at https://github.com/omz13/indieauth-ticketing-dist. I looked at my immediate use cases and Ticketing met most needs, but for one case it did not so I simply used Ticketing as a transport mechanism and
# 
rubenwardy has anyone written a guide on ActivityPub and making a mastodon-compatible server? I vaguely recall someone signing a book contract for that
[sebsel] and geoffo joined the channel
# 
[KevinMarks] Evan Prodromou got the book contract
jeremycherfas joined the channel
gerben joined the channel
# [KevinMarks] I read the Ticketing spec and it is still a bit confusing, especially the stuff about impersonating people. Can you state the user goal earlier?
[schmarty] joined the channel
[manton] joined the channel
# 
GWG aaronpk: Could I ask you about the issuer parameter in this https://github.com/indieweb/indieauth/issues/127 as it relates to the property in IndieAuth?
geoffo_ and AramZS joined the channel
# 
[schmarty] aaronpk++
# 
AramZS Yeah, I would miss that in a bunch of places but I agree there's a lot of spam going through there.
# AramZS Maybe there's some better way to detect spam on that front or do you think it's mostly just a lost cause? It's been a while since I turned them on anywhere for the spam reason.
# rubenwardy won't webmentions have similar spam issues when it see wider adoption?
# rubenwardy what is vouch
# 
Loqi The Vouch protocol is an anti-spam extension to Webmention that can also be used to customize how your site accepts responses from different audiences https://indieweb.org/Vouch
# rubenwardy vouch seems like it is more of a whitelist than a spam prevention measure
# rubenwardy I already manually moderate all my webmentions. I guess I could use vouch to allow some to be published immediately,and continue to moderate the rest
# AramZS I suspect you could prob do some detection at the level of the webmention.io site as well tho? Something like domain age, domain name, registrar, host checks etc.?
# AramZS aaronpk: legit concern, I know that can get messy and complicated fast. tantek: I feel like there should be? This sort of check is something that happens pretty frequently in a bunch of different use cases across the web. Domain authority is a frequent anti-spam/anti-fraud measure.
# AramZS [tantek]: I don't know of one off the top of my head though. It seems like something the OSS community *should* have, even though all the examples I can think of are private.
# rubenwardy webmention,io can always provide a spaminess float 0-1 and let the receiver decide what to do with it
# AramZS I think Akismet does something like that yes, or at least it used to. The last time I dug into Akismet's functioning was pre-Jetpack
# rubenwardy oh interesting, it suggests using http://indieweb.org/irc-people as a default vouch url
# AramZS There's something like https://www.domcop.com/openpagerank/ I suppose but to your point aaronpk it def isn't a perfect solution and people--especially new sites that might be legit--will likely get into complaining
# AramZS It's the same problem with email domain authority. In theory it is a great idea, but in practice it ends up being a difficult barrier for new entrants. I feel like someone must do the work of maintaining something like this for open source use, but other than the above link I'm not sure I've found anything yet. I guess the question is what the tradeoff is, limited function in particular ways that are not great vs not
# AramZS working at all.
# rubenwardy side note - the wiki really should proxy images rather than loading them directly from peoples websites, leaks ip addresses and view times
# 
aaronpk that's what owncast did: https://owncast.online/docs/chat/chat-authentication/#fediverse-authentication
geoffo joined the channel
# [schmarty] jacky - moving here before i set off Loqi in main. a tool to manage a personal GIF reaction store could go really far with a micropub media endpoint plus image / video proxy. definitely need to store that "where'd i get this?" metadata and probably collaborate w/ the media endpoint and proxies to allow quick takedowns in cases like the one you mentioned.
# [schmarty] jacky: i'm also curious what features of phanpy you'd like for an indie reader.
# [schmarty] i started my own indie reader project over the weekend. look at this hot progress lol https://media.martymcgui.re/50/19/7e/23/5de78c3c48ca76407756bead9e28a902a1f2e630cdadb49242544065.png
# [schmarty] 😂
# [schmarty] Oh those are all interesting!
geoffo joined the channel
# 
Zegnat [schmarty]: that reader is perfect to read the posts on https://sink.zegnat.net/ ! :D
# [schmarty] 😄
# capjamesg I can’t remember if I ever posted to the sink.
# Loqi Ticket Auth is an extension to IndieAuth that enables a publisher to send authorization, known as a ticket, that can be redeemed for an access token https://indieweb.org/Ticket_Auth
gRegor joined the channel
# [KevinMarks] I am being annoyed by event bubbling in js because I can't work out which event to eat. I have a link inside the `summary` of a `details` and an event handler on the link. I want to stop the details being opened too, but I can't work out what kind of event triggers the details to open, so I can call stopPropagation
# GWG I'm redirecting /Ticketing to it as well though to aid in finding it
WeirdWriter joined the channel
# [snarfed] anyone have any more background on this? https://www.tbd.website/blog/tbd-and-circle-announce-new-initiative-enabling-decentralized-identity
# [snarfed] this sounds...bold. "The mission of the organization is to serve as the vendor neutral home for the development of open source standards and decentralized technologies to enable mainstream adoption of decentralized IDs, credentials, and digital currency and financial applications...A new standards organization for decentralized technologies, credentials, and open payments."
# starrwulfe [snarfed]: Circle of USDC crypto fame and TBD aka Square aka Block.
# IWDiscord <starrwulfe#0>
# starrwulfe They were talking to the Stellar (XLR) people 2 years ago pre-pandemic about something similar to this. Of course the Ether guys though they'd be the one to do it with the whole .eth thing, but then the crypto-bois got hold of the NFT part and well... you know what happened....
# 
[tantek] LF is big on reference implementations as a way of doing standards. Obviously many (most?) of us think differently per /monoculture and W3C/IETF avoidance of any one so-called "reference" implementation (because that then implies that source is the reference, not the standard, so you no longer have a standard, you have implementation documentation)
[0x3b0b] joined the channel
# starrwulfe Exactly how many standards in this vein do we already have?? Seems like every other year some working group announces this. Especially when crypto went mainstream about 10 years ago.
bterry joined the channel
# starrwulfe are there some defacto standards already-- these would stand a chance and becoming THE standard. Just like how FeliCa near-field radio "tapping" became a defacto standard and was opensourced by Sony and allowed to become NFC-F
# starrwulfe LOL at the post. It's just as cynical as I am about this.
gerben and [0x3b0b] joined the channel