#@booksandbbqAbout to go full-on crazy with IndieWeb and Linux and encrypted email.
I mean, I'm already like 75% crazy as it concerns these things, but about to go 100%. Getting dadgum tired of the normie internet & its selling of people as data & its participation in the surveillance state (twitter.com/_/status/1300251441748209673)
[chrisaldrich] joined the channel
#[chrisaldrich]context collapse << 2020-01-13 Nicholas Carr [http://www.roughtype.com/?p=8724 From context collapse to content collapse] has some good implied questions about how to improve social feeds, feed readers, online journalism
#[James_Gallaghe][chrisaldrich] I took your advice and started to flesh out the wiki a bit on quantified self. I’d love to see more contributions to that page because it seems like there are so many IndieWeb sites that track QS data.
#ZegnatI guess this could be a problem if indielogin.com allows for those domains, and the MediaWiki extension does not provide clear feedback once a user returns from indielogin to the wiki.
#LoqiIt looks like we don't have a page for "blocked domains" yet. Would you like to create it? (Or just say "blocked domains is ____", a sentence describing the term)
#LoqiThe IndieWeb wiki requires that you use your own domain to login rather than a subdomain of someone else’s domain, and thus has blocked subdomains of several popular and typically free blogging or static file hosts https://indieweb.org/blocked_subdomains
#[tantek]I disagree with allowing github.io subdomains as logins to IndieWeb. Getting a domain is easier than setting up a github.io, and I'd rather discourage drive-by dev-types TBH
#[tantek]not the greatest path to improving community diversity IMO
#[tantek]if a dev doesn't want to commit to their own domain, why do they want/need to edit the wiki? do they actually believe in IndieWeb or are they using it as a place to propagate their "proposals"?
#LoqiIt looks like we don't have a page for "starter project" yet. Would you like to create it? (Or just say "starter project is ____", a sentence describing the term)
#aaronpkthat /blocked_subdomains page is now the most likely place someone will end up on if they try to log in with a blocked subdomain since it's in the error message displayed now, so we can also add more details there
#ZegnatNote that the case from #indieweb was specifically someone who already had a site hosted on their domain, and were not yet ready to pull the trigger to launch their new indiewebified site
#ZegnatSo the temporary or placeholder page did not seem to be an option specifically because of that.
#Zegnatthey even wondered if rel-me in HTTP header would work. Probably as a way for them to use indielogin without changing the current contents of their site
#[tantek]we allow rel=webmention in HTTP headers, so why not rel=me?
#aaronpki could add HTTP header support to indielogin.com
#aaronpkseems like an edge case but i don't really have an issue with it
#aaronpki'd have to decide priority of headers over HTML tags and such, especially if multiple are found. i'm thinking the presence of any rel=me HTTP header would make it ignore everything in the HTML
#ZegnatCould you not list all of them? You give the choice betwenen multiple providers if I add multiple rel="" to my HTML, right?
[jgmac1106] and Zegnat joined the channel
#aaronpki could, but there's already some fancy rules in there like if you have rel="me authn" then it only considers the "authn" ones
#ZegnatI guess you would be extending “Hidden Links” to also check Link headers, and leave everything else the same
#ZegnatSame fancy rules would apply, I am guessing. You would add them in the “discovery” step before filtering based on authn. (Then authn would also be supported in the Link headers)
#aaronpkis there a partticular reason you think they should be combined?
#aaronpkit seems like a security feature to prioitize link headesr over HTML if they are present
#ZegnatYou could do that, but I am not sure that matters at all in this case? You present the user with their pick of providers anyway. I am not sure you actually win anything by prefering one over the other.
#Zegnatan rel-authn within the HTML might be a more wanted alternative than a rel-me from the HTTP headers?
#aaronpkit matters less on a one-user domain, but if more than one user has access, or if users can edit HTML but not Link headers, then the operator of the site can have a more secure way to set the allowed providers that users can't override with HTML
#ZegnatHmm, true. I guess I am just wondering if that extra fancyness has any real world value in practice or if it adds complexity for very little reason.
#ZegnatYour product though, aaronpk, so whatever you think is best in implementation ;)
#aaronpkoh another one, if you show webmention comments but haven't sanitized HTML right, someone might be able to sneak in a rel=me link. but if you set an HTTP header then it wouldn't matter
#aaronpkIt's already possible for IndieAuth so why not?
#[jgmac1106]aaronpk I took a try, feel free to revise
#[tantek]aaronpk, I'd say start with the simpler option first (treating it the same as hidden links as Zegnat suggests), and document the security concern
#aaronpkit remains to be seen which is actually simpler
#[tantek]rel=me is supposed to be additive, to a set of options, so that seems more in line with the spirit of the spec
#[tantek][jgmac1106] pseudonymous identities also don't require use of your "real name". Anonymity is different, you can't even connect different instances of anonymous behavior, that's the key point.
[fluffy] and [manton] joined the channel
#[jgmac1106]okay after work will work on dfn trying to capture the difference
#[chrisaldrich][Ana_Rodrigues] was that tweet from @OFNblog with your Smashing artil doxxing your email address? Can we help by reporting their account for abuse?
[snarfed] and [Ana_Rodrigues] joined the channel
#[Ana_Rodrigues][chrisaldrich] I just messaged one of the senior editors at Smashing because the author’s emails are available on the feed and I didn’t know that. I’m emailing the owners of that account now to kindly ask them to delete that tweet. I had a look at the feed and I’m not the only one : /
#aaronpki like the addition of the how to use with your domain!
#[chrisaldrich]That is bizarre that they'd put the author's email address in <author> tag in the feed and not on the page... Do let us know if they don't fix it as I think a few here have some personal relationships that could help to remedy the problem.
#[tantek]the <author> tag never had any proper spec / interop either
#[tantek]thanks for the review aaronpk, appreciated. if we can think of more ways to try to help folks who get that login failure, we can hopefully add it there
#[tantek]our WP . com page is missing instructions for how to use it with your own domain name so I just linked to the top level page instead of a subsection
#aaronpki see... the twitter bot just copies whatever is the RSS author tag
#[tantek]I've asked the #indieweb-wordpress folks to add a specific subsection for that
#[Ana_Rodrigues]all the links from smashing (on that twitter account) have the author’s emails. But yes, I will let you know once I hear back from Smashing. Thank you!
#[chrisaldrich][Ana_Rodrigues] Because of the time difference, I'll mention that I'm sure Jeremy knows Rachel Andrew, the editor of Smashing if you need a direct connection to the top.
#[chrisaldrich]I have to imagine it's a benign oversight on their part that they'll want to fix immediately.
#jackyGetting a domain is _not_ easier than setting up a GitHub Pages site. GitHub Pages doesn't require money. That point re: it being centered around developers is key (and GitHub is really trying to gently break that mold but lol)
#aaronpkyou don't even need to use git or a git app to use github pages, it's possible entirely from the website, kind of like editing a wiki
#GWGI figured that West Coast is fine at its current frequency and we'd just see about a monthly online East Coast to gauge interest
#jmacSounds good! I took a few weeks off from IndieWeb stuff but I've been meaning to get back in; thank you for the ping
#GWGjmac: I am trying to build the online contacts I lack in real life
#GWGjmac: Still hoping for a IWC East in late October
#jmacGWG: I hear you. I am coincidentally paying attention to chats like this again thanks to my latest attempt to make chat manageable and not a complete attention-drain. (My undying, impatient obsession with trying to wrangle order out of the fractured and siloed chat universe is not unlike my attraction to IndieWeb, but is otherwise not exactly on topic)
#GWG[tantek]: Can I invite you personally to the event on the 12th?
#GWGIf not, I feel like I need to internalize the process
#aaronpkafter our discussion about which domains can log in to the wiki this morning, that reminded me that we should probably get an organizersr popup on the calendar
#aaronpkgiven that we used to do those adjacent to in-person events, but that won't happen again for a while
#[chrisaldrich]GWG, if you want to help lock in a late october/early November date, we can put an IWC East on the calendar and that'll give us a good excuse to do an organizers check in....
#LoqiThe IndieWebCamp community is planning numerous upcoming events, including future IndieWebCamps, regular Homebrew Website Club meetups, talks, and other proposals — if you'd like to help, please contribute to this page https://indieweb.org/Planning
#GWGIf it doesn't happen the day before an IWC... might not get spillover
#[tantek]aaronpk, like all recent Organizers meetups, it covered both the IWC and general issues
#GWG[chrisaldrich]: No, you reformatted it to remove context
#GWG[chrisaldrich]: I am busy until the 17th...I have nothing after that.
#[tantek]having to deal with the reality of an imminent IWC helps focus the "general issues" on things that actually matter more than theoretical concerns
#[chrisaldrich]I'm thinking maybe either November 7/8 or 14/15, both just after Daylight Saving Time changes. Veteran's day on the 11th is the only nearby holiday.