#dev 2025-01-09

2025-01-09 UTC
#
[tantek] does anyone remember the early Bluesky posts about what other protocols they had looked at and found limitations / problems with before they decided to create AT Proto?
#
aaronpk Vaguely
#
aaronpk I thought it was from Paul but I don't see it on his site. But did find this https://www.pfrazee.com/blog/why-facets
#
aaronpk Is it this? https://gitlab.com/bluesky-community1/decentralized-ecosystem/-/blob/master/README.md
#
[tantek] atproto << https://www.pfrazee.com/blog/why-not-rdf
#
Loqi ok, I added "https://www.pfrazee.com/blog/why-not-rdf" to the "See Also" section of /AT_Protocol https://indieweb.org/wiki/index.php?diff=99489&oldid=90676
#
[tantek] atproto << https://www.pfrazee.com/blog/why-facets
#
Loqi ok, I added "https://www.pfrazee.com/blog/why-facets" to the "See Also" section of /AT_Protocol https://indieweb.org/wiki/index.php?diff=99490&oldid=99489
#
[tantek] bluesky << Bluesky community comparison of analysis of various protocols/stacks: https://gitlab.com/bluesky-community1/decentralized-ecosystem/-/blob/master/README.md
#
Loqi ok, I added "Bluesky community comparison of analysis of various protocols/stacks: https://gitlab.com/bluesky-community1/decentralized-ecosystem/-/blob/master/README.md" to the "See Also" section of /Bluesky https://indieweb.org/wiki/index.php?diff=99491&oldid=98630
#
[snarfed] also https://atproto.com/guides/faq#why-not-use-activitypub
#
[snarfed] [tantek] re the webmentions redux post, yeah that policy debate around backfeed is age-old, https://indieweb.org/backfeed#Storage,_legal,_data_ownership,_UX...
gregsarjeant joined the channel
#
[snarfed] but yes good point, Bridgy does send wm deletes, I'll reply
#
[tantek] yes that's what I figured! good to really clear that kind of thing up, especially if people are somehow using lack of delete as a misinformed reason to not use webmentions
#
[tantek] thanks snarfed!
bugliker, bugliker2, yewscion and grufwub joined the channel
#
gRegor [snarfed], if an AS document looks correct but the "convert" link says the user isn't found, does that mean they've probably blocked Bridgy Fed? https://ap.brid.gy/convert/web/https://hachyderm.io/users/erincochran/statuses/113762243149990106/activity
#
gRegor https://hachyderm.io/users/erincochran/statuses/113762243149990106/activity looks like it works
#
gRegor I was trying to manually construct the source URL for a webmention
#
[snarfed] gRegor hmm! I can look
#
[snarfed] I would have expected BF to get an Announce activity for that repost
#
[snarfed] ah it probably did. looking
#
[snarfed] oh they're less than 2w old
#
gRegor Oh, is that a Mastodon limit or BF? I can retry it later.
#
gRegor nvm, just saw it in docs
#
gRegor Good to know, thanks for checking!
[Laura_Hilliger] joined the channel
#
doesnm hello, can someone show example of u-in-reply-to? i have an idea how to use this in my feed
[marksuth] and [qubyte] joined the channel
#
[qubyte] Here’s an example: https://qubyte.codes/replies/1714906247110
#
[qubyte] (I hope well formed)
#
Loqi [preview] [Dr. Mark Stanley Everitt] If you want to avoid using a nonce value, the other way to go about it is to hash the resource and put that in the CSP header. I blogged about the interaction between CSP and import maps (which must be inline), and caching and it turns out to work re...
#
funkylarma Does the order of the reply micro meta matter? It looks like I have all the classes in my template, just in a different order.
srijan joined the channel
#
doesnm [qubyte]: so url is enough and i don't need to fetch post?
#
[qubyte] I’m not sure I follow. Is there a need to fetch it?
#
doesnm i'm ask about this
#
doesnm Like does i should display parent post which i reply
#
[qubyte] It’s up to you how you display replies, but that sounds more like some sort of quote.
ttybitnik and nemonical joined the channel
#
[KevinMarks] Paul also authored JSON-LZ https://github.com/pfrazee/json-lz
#
Loqi [preview] [pfrazee] json-lz: Simple self-describing JSON
#
[KevinMarks] I stil think https://www.pfrazee.com/blog/why-facets is boneheaded HTML erasure
#
[tantek] [KevinMarks] facets reminded me of TSS 😂
#
[KevinMarks] It reminded me of Google Wave (uncomplimentary)
#
doesnm Im tried to host Open source Google Wave
#
doesnm https://github.com/apache/incubator-retired-wave iirc this
#
Loqi [preview] [apache] incubator-retired-wave: Apache Wave is now retired
Pixi` and Pixi__ joined the channel
#
[qubyte] Facets are fun to think about, and even play with, but they seem to be limited to inline stuff. Maybe they’ve boxed themselves into a corner.
#
[tantek] "inline", "boxed" I see what you did there 😂
RapidRotator, [schmarty], thegreekgeek, ttybitnik and GuestZero joined the channel
#
carrvo[d] capjamesg: your Passkey implementation has me thinking: why not use a Passkey on the IdP side of IndieAuth? (Other than the obvious your users have not done so for themselves.) What difference is there between the service providing the option and the IdP providing it?
#
capjamesg[d] Definitely!
#
capjamesg[d] I was thinking about that yesterday.
#
capjamesg[d] Your IndieAuth server could use passkeys as your authentication method.
#
capjamesg[d] Which I am very tempted to do tbh.
#
capjamesg[d] Then I could sign into all the indie services I use with a fingerprint 😄
#
carrvo[d] I think it is slightly better on the IdP since it gives the opportunity to choose scopes each time. But the down side is each individual must.
#
carrvo[d] capjamesg++ try it and let me know how it goes!
#
Loqi capjamesg has 43 karma in this channel over the last year (221 in all channels)
#
carrvo[d] I was thinking about it because Passkeys seem to be significantly similar to client certificates, and I am thinking (very future) of trying those on the IdP with IndieAuth.
#
aaronpk passkey lower case
#
carrvo[d] Is it? Sorry.
#
aaronpk yes like password
#
capjamesg[d] I have been meaning to reboot my IndieAuth server... https://github.com/capjamesg/jamesg-indieauth
#
Loqi [preview] [capjamesg] jamesg-indieauth: An IndieAuth endpoint built with Python Flask.
#
capjamesg[d] [edit] I have been meaning to reboot my IndieAuth server... https://github.com/capjamesg/jamesg-indieauth
#
Loqi [preview] [capjamesg] jamesg-indieauth: An IndieAuth endpoint built with Python Flask.
#
aaronpk like OAuth, IndieAuth doesn't specify how the user authenticates at the OAuth server. so passkeys are definitely a great option for that
#
GWG My indieauth endpoint uses passkeys optionally
#
GWG Of course, I didn't write that code
#
doesnm how to use passkeys without google/apple/etc ?
#
doesnm then i'm tried to use keepassdx with whatsapp he start freezing
#
GWG I've been using Bitwarden
#
GWG There's a self hosted server option
#
doesnm after lost keepass i'm using firefox passwords. But can't export passwords without mozilla account
ttybitnik and gRegor joined the channel
#
aaronpk i keep all my passkeys in 1password
#
gRegor doesnm, https://indieweb.org/reply has some How To and IndieWeb Examples if you want to see them in action
#
gRegor For displaying what you're replying to, or parts of it, https://indieweb.org/reply-context
#
doesnm i'm display just reply links. Hope it enough
#
doesnm url same as yesterday (added h-card): https://doesnm.p.psf.lt/twtxt.html
#
gRegor Yep, a link with u-in-reply-to is great!
#
gRegor Looking good!
#
doesnm thx
#
gRegor If you want to preview how it looks in Monocle: https://monocle.p3k.io/preview
#
doesnm iirc i'm checked
#
doesnm wait why salty link is broken
#
gRegor This is a feed preview, not the h-card
#
doesnm monocle shows in-reply-to now, grea5
#
doesnm gRegor: i mean on my page
#
gRegor https://indiewebify.me/ has some validators for h-card and h-entry, not h-feed yet. Monocle's preview isn't really a validator, just an idea of how your feed will look in Monocle
#
gRegor oh, I see the Salty.IM link
#
gRegor Though looks like just an anchor link on the page
#
doesnm i forgot to add u-photo to avatar
#
doesnm it should link to im:doesnm@doesnm.cc
#
doesnm gRegor++
#
Loqi gRegor has 34 karma in this channel over the last year (129 in all channels)
#
doesnm thx for hint
vriska, sebbu2, rrix and ttybitnik joined the channel
#
trinsic_paridiom [Murray]: Weird... Everything online says SSL certs renew yearly because they expire. Are we talking about the same thing?
#
trinsic_paridiom edmael[d]: Gandi changed ownership recently, they jacked the prices way up with little to no notice. Notifications about the price changes are buried inside unrelated text, etc. That constitutes enshitifilcation to me. https://news.ycombinator.com/item?id=36321783
#
trinsic_paridiom [edit] edmael[d]: Gandi changed ownership recently, they jacked the prices way up with little to no notice. Notifications about the price changes are buried inside unrelated text, etc. That constitutes enshitifilcation to me. https://news.ycombinator.com/item?id=36321783
#
Loqi [preview] [aendruk] Gandi.net – Pricing Update
#
Loqi [preview] [aendruk] Gandi.net – Pricing Update
#
trinsic_paridiom [snarfed]: This was in response to your query about Gandi the other day: https://discord.com/channels/866577279223595018/866577430886350869/1327048857040715818
#
carrvo[d] trinsic: SSL expiry timeframe is up to the certificate authority. Let's Encrypt, for example, I think is 4 months. Also the requirements for issuing and renewing (Some require proof of physical ID, some just control of the domain). Automatic renewal is pretty common and is pretty one-time effort.
#
carrvo[d] If you want to dive more into the background you could start with https://letsencrypt.org/docs/client-options/
#
carrvo[d] [edit] If you want to dive more into the background you could start with https://letsencrypt.org/docs/client-options/