[snarfed][Kupietz] re your security point in #indieweb...not sure I'd frame it quite like that. security is both hard and changing fast, eg the surface area and threat model for third party SaaS OAuthed into your IdP (as in the Vercel breach) are fundamentally different than the classical fortified perimeter + on prem network model
[Kupietz][snarfed] fair enough, and I'll defer to your likely much more comprehensive knowledge on these issues, but it seemed from my reading that both fundamentally involved failures of humans to manage risk: an engineer blithely giving a third-party agent broad access as if it couldn't possibly be compromised, and Anthropic putting the services of "the most dangerous LLM ever" at an easily guessable endpoint.
Loqi📓 A draft in the context of the indieweb refers to a draft post, a post that an author has partially written, or otherwise does not consider finished https://indieweb.org/draft
[capjamesg]I have felt the same way with regards to “hidden” posts that also have a permalink too. Because posts can be listed in so many different places — home page, sitemap, category pages, date pages — having the right level of abstraction is important so that when something is hidden it is hidden across the website.
srazkvt, lars_the_bear, vidak, ribose, [Jo] and lain` joined the channel
[tantek]there are a bunch of webmention "best practices" that a bunch of implementations have adopted (anecdotally) that may merit uplifting into the spec (since they improve the use of the protocol and have multi-implementer support)