#dev 2025-07-08

2025-07-08 UTC
grufwub joined the channel
#
Loqi
Bridgy has 3 karma in this channel over the last year (4 in all channels)
#
gRegor
Bridgy++
#
[mattl]
Are people publishing everything they post to both bsky and mastodon?
#
Kolev
Is there a guide on writing markup for notes and getting them to Mastodon with Bridgy Classic?
#
gRegor
I selectively cross-post. Often it's to both, but not always.
#
[mattl]
I find myself copying and pasting because I try to split my technical posts 60/40 on Mastodon and my non technical posts 70/30 on bsky
#
Kolev
Hm. There's a lot of stuff there, gRegor. Very complicated.
#
gRegor
Not really, the microformats2 aren't much. You can use an interactive form when you sign in on https://brid.gy to cross-post on demand. You don't have to use webmentions to trigger publishing.
#
gRegor
You could start with adding microformats2 to your notes and using the indiewebify.me validator
#
gRegor
The table of contents at the top of that bridgy docs might be more helpful, it's kind of like an FAQ page, not something you need to read through every bit of to start though
Pixi`, Pixi__, oodani, jak2k, jak2k1, Daijo, NaomiAmethyst8, soomoh, kitn, ttybitnik, bterry, thegreekgeek_, oenone and [manton] joined the channel
#
[manton]
On the .bar naming… I honestly just thought .bar sounded better than .baf. 🙂
#
[manton]
Also sort of a nod to foo/bar.
#
[manton]
What is BarCamp?
#
Loqi
BarCamp is an open structure for creating and organizing user-generated conferences focused on whatever subject(s) the organizers and attendees decide https://indieweb.org/barcamp
#
doesnm
[manton]: what is baf
ttybitnik and Guest4 joined the channel
#
capjamesg
What is BAF?
#
Loqi
blog archive format is a data format proposed by Manton Reece for the export of a blog, based on a zip file and top level HTML h-feed inside, that is supported by micro.blog https://indieweb.org/BAF
oenone joined the channel
#
Kolev
BAF sounds amazing. Right now, I have several flavors of Markdown and some posts even in SXML.
gRegor, gRegorLove_, KE0VVT, [aciccarello], duanin2, balintm, grufwub, jak2k, [denschub], jonnybarnes, barnaby and btrem joined the channel
#
btrem
I'm thinking of adding read posts to my site which is generated by a SSG. And wondering what fileslug to use for the read posts. Any thoughts from SSG users?
#
Loqi
btrem: gRegor left you a message 1 week, 4 days ago: I experimented with authenticated ICS. Interested to see if this works for you. Notes: https://gregorlove.com/2025/06/here-is-what-i/
#
btrem
gRegor: sorry, I've been at work (my paying, non-i.t. job). Didn't see this note until just now. I'll have a look now.
#
btrem
gRegor++ it seems to work, thanks for setting up the test. Any chance you could add an event to the calendar? Then I could see if my TBird calendar adds it.
#
Loqi
gRegor has 38 karma in this channel over the last year (107 in all channels)
#
btrem
FWIW, I sort of figured this would work. The challenge for me is figuring how to set up basic http auth on a Drupal site. Drupal is quite powerful. But with great power comes insane complexity, so doing tasks that should be easy can instead be damned near impossible unless you're a real Drupal expert.
#
btrem
Also, I'm really discouraged by this line from your post: "Google Calendar does not appear to support subscribing to authenticated ICS." That is terrible news. It means the .ics feed is probably not worth doing, since I imagine most coop members -- like most people generally -- will be using Google calendar, and not Thunderbird or some dedicated app. :(
#
btrem
Ouf. I really am disheartened about this. I spent a lot of time trying to figure this out, and all for naught, apparently. Google--
#
Loqi
Google has -1 karma over the last year
#
perryflynn
you still could do it with a auth key as part of the url or query string.
#
perryflynn
in nextcloud I also can share the ics feed with a token in the url.
#
aaronpk
yea it's not great but that's the generally accepted model for ics feeds, using a long random string in the URL and treating it as a secret
#
[tantek]
yes, I remember Facebook used to offer an ICS feed of your events like that
#
[tantek]
also W3C events offer that
duanin3 joined the channel
#
mandaris
Spent sometime looking at spf for emails. A lot of the resources that I found wanted to sell me something.
#
.pi.r2.
DKIM appears still rather optional to me but SPF is a must have to not get flagged as spam
#
btrem
I am loath to recommend that coop members put their password for the website into a url for a ical feed. Our security is dodgy as it is. ;-)
#
perryflynn
nextcloud uses a dedicated token for that, as mentioned before. maybe the api (is there an api) of drupal can be used for such thing? so use a api token with specific permissions to publish a calendar.
#
mandaris
For me, I was a little frustrated trying to get information on `?all` versus `~all`.
#
btrem
perryflynn: not sure what a "dedicated token" would be.
#
perryflynn
a secret tied to a user but not the main account password.
#
btrem
sighs
#
perryflynn
m​andaris: the wikipedia article is quite good.
#
btrem
I'm already struggling to set up a working ics. Now I'll have to figure this out, too. :(
#
btrem
I'll look it up in wikipedia. But frankly, I'm not sure I'm going to continue with this project. Too much work for something that may be used, may not be.
#
[tantek]
yeah it's not a password in the URL, it's a URL generated with a "random" uniqueID that is only shown to someone who has logged into the site, and told not to share that URL with anyone else
#
perryflynn
do one step after another. nobody prevents you from just putting a static secret into drupal for now.
#
[tantek]
that way you can log in to the site and "reset" that URL at any point without having to change your pw
#
perryflynn
just hardcode the secret portion of the url for now and make ical work. later you can then figure out how to make the user-specific secrets work.
#
btrem
I'll look into it, but don't know if I'll actually implement it.
#
btrem
I note that both Thunderbird calendar and Ubuntu calendar app can handle http auth. It's a real shame that Google can't. So I'd probably need to provide an http auth url for dedicated apps, plus some sort of token url for Google calendar users.
#
btrem
Gah, I hate Google right now.
#
btrem
I'm not sure if Google calendar can handle https (as opposed to http). There are disagreements in SO and other places on this question. That makes things a bit dodgier, unless my calendar is read-only.
#
btrem
I was hoping to allow coop-members use their calendar app to indicate whether they were attending events published in the ics feed.
#
perryflynn
google calendar can handle https. I subscribe multiple statis ics files from https urls.
#
[tantek]
what is a capability URL
#
Loqi
A Capability URL (AKA magic link, hard to guess URL, or secret URL) is a URL that provides access to a resource to anyone who has the URL without an explicit login https://indieweb.org/capability_URL
#
[tantek]
^ more there
#
perryflynn
the wiki is really like a text adventure. you just have to know what to ask. fascinating. :-)
#
capjamesg
perryflynn++
#
Loqi
perryflynn has 9 karma in this channel over the last year (21 in all channels)
#
capjamesg
That's a great description 😂
#
btrem
Yeahbut as we know, security by obscurity is not really all that secure. ;)
#
perryflynn
well, what's the difference between a very long secret in the url and a password you send as a basic auth header? IMHO there is none.
#
perryflynn
per default query parameters are even not logged in webserver logs. so even that is not a problem.
#
[tantek]
btrem depends on how much entropy 🙂
#
[snarfed]
right. security characteristics are similar, and the capability URL lets you narrowly scope it to just that URL, as opposed to a whole account or similar
#
[tantek]
perryflynn, yes the wiki is a text adventure, and Loqi is your dungeonmaster (or jester)
#
[snarfed]
the one catch I have seen in the wild, and maybe some here too, is that capability URLs don't "feel" secure to mainstream people in the same way that passwords do
#
[tantek]
Loqi, dungeonmaster or court jester?
#
capjamesg
Loqi is also a dinosaur.
#
Loqi
says dungeonmaster
#
[tantek]
there you have it
#
capjamesg
It is thus decreed.
#
perryflynn
:-D
#
btrem
Oh Loqi strikes again.
#
btrem
[snarfed]: yeah, limited url access is nice. But note my point about wanting, in an ideal world, read *and write* access to the calendar.
#
[snarfed]
heh sure, I haven't followed the broader calendar conversation, I'm only weighing in on capability URLs themselves
#
btrem
You know that look that comic strip characters have when they're miffed? That's me right now.
barnaby, balintm, bterry and rozodru joined the channel