#dev 2024-03-09

2024-03-09 UTC
#
[Joe_Crawford] Oh so I only just enabled comments on pages yesterday.
#
[Joe_Crawford] I wonder if I need to update wm plugin to allow on pages
#
gRegor Well, https://artlung.com/guestbook/ advertises a webmention endpoint, didn't have an issue with that part
#
gRegor My site did the discovery, sent source, target, and vouch URLs, but got a 503 response
#
[Joe_Crawford] Yeah, it’s enabled.
#
gRegor So then I used the webmention form on the bottom of the page instead and that worked
#
[Joe_Crawford] Grumble.
#
gRegor So I'm wondering if wordfence has some logs with my site's IP that were rejected
#
[Joe_Crawford] Was it from 121.36.11.242? That got flagged special.
#
[Joe_Crawford] No idea why
#
gRegor The vouch param has caused issues in the past, though pretty sure that's been fixed for a while, and the earlier issues weren't 503s
#
gRegor No, should be 173.236.141.174
#
[Joe_Crawford] I can look but later
#
gRegor Odd. Not urgent, but just has me wondering since it happened twice today with different sites if my IP is on a list
#
gRegor off to mxtoolbox
#
[schmarty] i'm looking into passkeys (webauthn) for my IndieAuth setup. /Web_Authentication has... no IndieWeb examples. anyone using these on their personal sites or in as a building-block (rather than part of a big service or framework)?
#
[schmarty] (if i can get comfortable with them, i'd like to build a system that lets me issue one-time logins that allow passkey enrollment, making a passwordless system for private posts.)
#
[tantek] I would love to hear aaronpk's opinion about how IndieAuth and WebAuthn would make the most sense together / in combination, from user-story down to protocol building blocks working together
#
gRegor Ooh
#
[schmarty] while it's not super-detailed, the paragraph at the top of /Web_Authentication kind of does that. For sites that support logging in via IndieAuth, they just keep using IndieAuth, it's your IndieAuth provider that uses WebAuthn to authenticate "you".
#
[schmarty] the idea i'm rolling around for private posts will require folks to "log in" to it somehow. IndieAuth is a fine way, for folks who have that set up, and I plan to support it.
#
[tantek] browser <- WebAuthn -> your website <- IndieAuth -> website you are signing into
#
[tantek] ^ like that?
#
[schmarty] if "your website" is "your IndieAuth provider" then i would say yeah, that's how IndieAuth + WebAuthn go together.
#
[tantek] does this mean IndieLogin should support WebAuthn?
#
[schmarty] the extension i'm interested in is that, once you are signed in to my site via IndieAuth (or any other method), I can offer you to set up a WebAuthn credential for my site, directly.
#
[schmarty] so you'd sign in with IndieAuth and set up a WebAuthn credential. if you visit my site a week or a month later from the same device and your session has expired, you can use your WebAuthn credential right away and skip the IndieAuth round trip.
#
[tantek] oh fascinating
#
[schmarty] (then, replace that initial IndieAuth step with "i create a magic link that i associate with your name and send it via any channel i communicate 1:1 with you" and folks without IndieAuth can read my stuff)
#
[tantek] that's more complex than the ASCII line-diagram I drew
#
[schmarty] haha, yeah, i couldn't figure out how to represent it in one dimension 😂
#
[tantek] that's because it needs a second dimension for time
geoffo, angelo, jacky, CLDR, bterry, [Al_Abut], lazcorp, [Ana_R], Maggie, mahboubine, [Paul_Robert_Ll], [tantek] and chimo joined the channel
#
[Ana_R] [KevinMarks] I've been trying to open https://glitch.com/~it-me-web for a while but glitch doesn't seem happy. Have you got a copy of this elsewhere?
[jeremycherfas] and [KevinMarks] joined the channel
#
[KevinMarks] It's telling me that the node version is too old. Also I'm pretty sure it's twitter api key has been revoked
jacky joined the channel
#
[KevinMarks] This should be a backup
#
[KevinMarks] https://chat-uploads.indieweb.org/files/2024/03/dev-20240309-155551-it-me-web-2024-03-09_155452.tgz
#
[KevinMarks] (I'm on my phone, so can't check it easily)
#
[Ana_R] Thank you!!
nertzy and [schmarty] joined the channel
#
[schmarty] wishes for indieauth.rocks/server
#
aaronpk forever coming soon 👀
to2ds, AramZS, geoffo, [Ros], petermolnar, superkuh, angelo_ and [qubyte] joined the channel
#
[tantek] What is hosting
#
Loqi Web hosting can be the primary regular cost in maintaining an IndieWeb site; this page lists several options from free on up depending on your publishing needs, like a static, shared, private, or dedicated server https://indieweb.org/hosting
#
[tantek] hosting << Warning: beware of hosting "deadends" where similar to a silo roach motel it's hard or near impossible to get your content, data, configurations, templates etc out and migrate to another hosting provider without "rebuilding everything from scratch" or similar non-trivial development efforts.
#
Loqi ok, I added "Warning: beware of hosting "deadends" where similar to a silo roach motel it's hard or near impossible to get your content, data, configurations, templates etc out and migrate to another hosting provider without "rebuilding everything from scratch" or similar non-trivial development efforts." to the "See Also" section of /web_hosting https://indieweb.org/wiki/index.php?diff=93732&oldid=92946
#
[tantek] hosting << suggest criteria: evaluate hosting options by how easy is it to migrate everything (content, data, configurations, templates, email aliases, etc) to a different hosting provider
#
Loqi ok, I added "suggest criteria: evaluate hosting options by how easy is it to migrate everything (content, data, configurations, templates, email aliases, etc) to a different hosting provider" to the "See Also" section of /web_hosting https://indieweb.org/wiki/index.php?diff=93733&oldid=93732
nertzy, [manton], [Fran], jacky and [jacky] joined the channel