#dev 2026-09-20

2026-09-20 UTC
cotsuka, bterry, TwinAdam, grufwub, Xlongdivision, jjuran and mahboubine joined the channel
#
[rose]
My dad was asking me about passkeys. I said I didn't really like them because they get tied to devices or big tech. That the only ones I use are the ones on my Vaultwarden instance, but a lot of things won't work with passkeys on there. TBH I pressured him to sort out his 2FA situation, but didn't really see the value of passkeys...
#
[rose]
But yeah, I think a link to articles about why they are not a great idea would be useful. TBH I explained my objections to them a bit off the fly, and wasn't at that point really aware that this wasn't just a "me" thing and others don't like them, either. To me, the security argument feels a bit weak, since it's kinda like an SSH key anyone on the device can use. Yeah, more complex than something short and crappy, but you shouldn't be using
#
[rose]
something short and crappy to start with?! And devices held in public, you are basically reducing it to "is the device locked or not", which can be a bit of a flimsy measure...
#
[rose]
My dad's best mate and my mum's best friend (they're also a married couple, the two people) were asking me about IT security etc., on a range of matters. Tbh they listened much better than my dad does! The main thing for authorisation, imho, is 2FA, but I think older people have issues figuring out authenticators and why that's better than mobile phone numbers. Passkeys, again, have the same problem... Lose your device, or switch ecosystem,
#
[rose]
and you're out again. Anyway, seems I am not alone after all.
#
[rose]
RE: The guestbook discussion, I had been wondering about whether ntfy could be repurposed that way. If you had an open channel, people post to it, you have a script to avoid junk, and genuine posts have to include a time-based code at the start perhaps... Could work, with some built-in bot filtering.
#
[rose]
Didn't mention it before cos the other proposals looked better. But then I realised, well, everyone gets on better with systems they already know and use, and this is probably what I would lean to just cos I use ntfy already.
[trovster], [trovster]1, cotsuka and thatoddshade joined the channel
#
[capjamesg]
[snarfed] Do you know why I might need a `https://web.brid.gy/r/https://jamesg.blog/` rel=me in my site <head>?
cotsuka and rMdes joined the channel
#
aaronpk
[social]: ok should be fixed now!
cotsuka joined the channel
#
[social]
[aaronpk]++ That worked it runs through now. Thank you!
#
Loqi
[aaronpk] has 33 karma in this channel over the last year (105 in all channels)
#
Loqi
😊
cotsuka joined the channel
#
[snarfed]
[capjamesg] yeah that's to verify the profile link to your web site in Mastodon, https://fed.brid.gy/docs#mastodon-link-verification
#
[capjamesg]
Ah, thank you!
#
[social]
I found an oddity in the subdirectory for https://vanderwal.net/random/ verification…
#
aaronpk
that is odd
#
[social]
☝️ this is http://webmention.io
#
aaronpk
what are you trying to do here?
#
[social]
This is something in http://webmention.io from a long while ago. Not sure if it ever worked. If all sub-directories are covered by the top level validation I can delete it.
#
aaronpk
ah, let me see
#
aaronpk
ah yeah, that should never have been allowed to be created. it's all based on the domain, no need to add subfolders individually
#
carrvo
aaronpk++ I forgot about that MR! Hopefully it is useful for others.
#
Loqi
aaronpk has 34 karma in this channel over the last year (106 in all channels)
#
aaronpk
one of the many bugs of the old site
#
[social]
I really like the GitHub style “type this in” pattern to confirm deletion.
#
aaronpk
yeah same, it's just enough friction to not let you do it accidentally
#
[social]
I have some repo merge blocks on some of my personal repos that only I work on to add a little friction and not just speed run a PR and have to think about it.
#
aaronpk
in other news, did I just receive the first known example of a webmention from an AI agent?
#
aaronpk
they sent a webmention, and there was an error in the async processing of it in webmention.io so the status page returned 500, so then they sent me an email about the 500 error
#
aaronpk
not sure where to document this on the wiki
#
[snarfed]
congratudolences
#
aaronpk
at least they were up front about it: "I am an autonomous software agent, writing about accounts I operate rather than asserting another person's identity." and the email was from a agentmail.to address
#
WinnerWind
bit lost about h-entry and microformats. Considering my site is HTML soup, could I just duplicate all the content and then hide them, then specificially mark that up with h-entry stuff?
#
WinnerWind
(additionally the base template can be found here if someone is willing to give direct advice on how i could mark up my site) https://git.winnerwind.in/WinnerWind/joker-ssg/src/branch/main-blog/templates/base.html
#
aaronpk
that doensn't look too bad, should be possible to add microformats to the specific parts of the post
#
WinnerWind
you mean without duplication, right?
#
aaronpk
like line 83 gets class="p-name" for the post title
#
aaronpk
probably line 80 gets h-entry
#
WinnerWind
so one question about the use of classes here, if i mark up something with a h-entry that has another class (eg. <main class="main-content h-entry">) will that be considered as a h-entry?
#
aaronpk
basically go through the template and identify all the parts that have corresponding microformats properties and add the classes there
#
aaronpk
yeah that's fine
#
WinnerWind
ah okay, then i can handle the rest. i thought the h-entry thing had to be the ONLY class
#
aaronpk
you can check your work as you go by running a built page through a microformats parser
#
Loqi
[preview] [Coyote] The Lazybones Guide to H-entries
#
thamara_k
I used this guide. It’s good.
#
WinnerWind
is that all the micro-formats, or is it just the most common ones?
#
WinnerWind
because of how my site works its real easy to modify the html template in one place and have that render everywhere
#
thamara_k
That’s what I’ve done as well
#
thamara_k
Feel free to have a look
#
WinnerWind
yup, found your site code (i think?)
#
WinnerWind
going to take a loook
#
aaronpk
new indieauth debug tool! https://indieauth.rocks/check
#
aaronpk
this one is meant to be more user-facing, to help troubleshoot where errors happen. the main indieauth.rocks site is for server and client developers
#
thamara_k
WinnerWind feel free to email or Signal, I can send you all the relevant templates, feeds etc. rather than spam here https://thamara.co.uk/hello
#
WinnerWind
thamara_k: thanks for the offer! I'm looking through your repository on github with the code, and i'm understanding how to do the microformats thing
#
WinnerWind
i appreciate the offer though!
#
thamara_k
perfect
[trovster]2 joined the channel
#
[social]
[aaronpk] this is really good!
[trovster] joined the channel
#
WinnerWind
OK! microformats done! the parser says that it could find a HTML "content", which is good
#
WinnerWind
however it appears to have missed the date , which i did like this
#
aaronpk
thanks [social]!
#
aaronpk
WinnerWind: dt-published tells the parser to use the value in the datetime attribute, which is blank in your example
#
WinnerWind
oh, i see, i thought it had to go inbetween <time>
#
WinnerWind
so is <time> a self closing attribute?
#
WinnerWind
neat! time appeared after i filled in datetime
#
WinnerWind
the lazybones guide had it as blank and so i thought it had to remain blank
#
aaronpk
hm the checkbox in the guide is wrong but the example shows it has a value
#
WinnerWind
yes, i hadn't looked atht e example, my bad!
#
WinnerWind
seems now every microformat parser likes my site
k3can8 joined the channel
#
WinnerWind
i have been alerted to the existence of https://microformats.org/wiki/microformats2. i must now use every microformat in existence /j
#
tdrayson
Finally added interactions on my website, it has local reactions/comments, plus webmentions and social syndication reactions/comments
#
WinnerWind
congrats!
#
WinnerWind
actually i'm confused about comments/replies. i know webmentions allow for sending those, but how exactly would i use, eg. Telegraph, to send aa reply to someone?
#
WinnerWind
or do i not even use Telegraph to send a webmention reply, instead doing it directly?
#
aaronpk
you can definitely do it directly. telegraph is meant to be an API that does a bunch of the logic you would do yourself
#
WinnerWind
and to do it directly, i assume i need to CURL their site acepting webmentions directly
#
WinnerWind
but lets say i was using telegraph. i assume the next step would be to wrap my webmention reply in some microformats, then i tell telegraph to check the page for webmentions, then it sends off the webmentions, correct?
#
WinnerWind
problem is i can't find what microformats would be appropriate for a webmention reply ^_^``
#
WinnerWind
oh one last thing, for microformats, would using a hidden element for everything be appropriate?
#
WinnerWind
i thought it would be easier, code wise, to move all the microformats into one area and hide everything in there
#
WinnerWind
(well, as many microformats as i reasonably can)
#
WinnerWind
https://indieweb.org/reply oh this is useful, the wiki comes in clutch as usual
#
Loqi
aaronpk has 35 karma in this channel over the last year (107 in all channels)
#
Loqi
[preview] [Aaron Parecki] Sending your First Webmention from Scratch
#
WinnerWind
the reply webmentions thing have always been an enigma to me
#
tdrayson
On my site I have the option under any entry for someone to paste their reply post to me and it will send me the webmention
#
tdrayson
Yeah for a reply, you just markup your "post" with the `u-in-reply-to` I believe
#
WinnerWind
tdrayson: that's really cool, and aaron PK has that too, but unfortunately my site is 100% static with 0 js, so i can't include something like that
#
WinnerWind
unless there's a pure JS free solution for that
#
tdrayson
I setup my site so whenever I write a note or article, i can selec the response type and it auto fetches the microformat data to attach to the entry
#
tdrayson
then posting auto sends the webmention to the other person
#
WinnerWind
oh that's real neat!
#
WinnerWind
my ssg is extremely pipelined so i need to define all of this in the templates itself
#
WinnerWind
which shouldn't be impossible
#
WinnerWind
i was making a webmentions microlibrary to fetch webmentions for me
#
tdrayson
if you are using webmention.io could you not just send the request directly to them on submit?
#
tdrayson
you could probaly use a form to submit directly to webmention.io if you dont want to make a fetch request using js
#
IWDiscord
<t​drayson>
#
WinnerWind
and also send them during compiletime
#
WinnerWind
i dont think webmention.io has an API dedicated to receieving requests
#
WinnerWind
i mean, i dont think webmention.io doesnt have a dedicated endpoint i can redirect to to receieve webmentions but i could be wrong
#
tdrayson
it collects webmentions on your behal
ax562 joined the channel
#
tdrayson
behalf*
#
WinnerWind
oh, i did not know that endpoint had a HTML page
thatoddshade joined the channel
#
tdrayson
you can copy the exact html, just hide the target and hardcode to the current page url. and point it at the webmention url above
#
tdrayson
no js needed
#
WinnerWind
tdrayson: admittedly never played around with form tags. thanks!
#
tdrayson
super simple all browser based
barnaby, [jgmac1106] and jjuran joined the channel
#
WinnerWind
for webmention replies: would it be appropriate to make a page where i write down every reply i make, which is then turned into microformat marked up HTML and then finally push that through Telegraph.p3k to be sent to everyone? or am i misunderstanding how exactly replies should work
#
WinnerWind
i guess making a set of pages for each reply makes more sense ^_^``
#
tdrayson
heres an example of a reply I made to [Trevor_Morris] earlier - https://taylordrayson.com/2026/09/20/replied-to-combine-harvester-near-aylesby
#
IWDiscord
<t​drayson>
#
IWDiscord
<t​drayson>
#
tdrayson
I created a "note" that was marked as a reply to his post
#
tdrayson
Most people will use "notes" as their form of reply. I believe each reply needs to be a unique url. since the source (your url) has to be unique.
#
Loqi
[preview] [Taylor Drayson] These overhead shots are awesome! I love the last close-up photo of the combine harvester where you can see all the details.
#
tdrayson
they can't be merged on the same page as the person you are mentioning would have no context of what your reply is
#
WinnerWind
ah! that makes sense :3
#
WinnerWind
my site is highly organized, so i need to create a dedicated replies/ section
#
tdrayson
You can then just use your webmention.io-hosted page to copy the reply URL on your website and paste the link of the person that you're replying to
#
IWDiscord
<t​drayson>
#
tdrayson
Or you set it up to auto-send when you re-deploy
#
WinnerWind
yeah, i'm thinking of using the telegraph API to trigger webmention detection for every page
cotsuka, TwinAdam, barnaby and daemonspudguy joined the channel
#
thamara_k
tdrayson[d] interactions on the site are looking great!
#
tdrayson
Thanks thamara_k[d] Took almost a month to build, because of all the different integrations, I even added in Salmentions which I only just found out about three days ago
#
tdrayson
It started out as just adding in Webmentions, and then one thing led to another. I started adding in everything else, and the scope just got bigger and bigger
#
thamara_k
Haha always the way isn’t it
#
thamara_k
TIL about salmentions
TwinAdam, CrimeWave and jak2k joined the channel
#
[snarfed]
oof I'm sorry
#
[snarfed]
important step on the road!
#
[snarfed]
...but in 2026 I would not recommend writing or maintaining code to do salmentions
#
[snarfed]
oh maybe I mean Salmon
#
[snarfed]
(the OStatus one)
jak2k, TwinAdam and cotsuka joined the channel
#
[rose]
Because salmon is endangered?