#meta 2024-08-13

2024-08-13 UTC
guest50 and AramZS joined the channel
#
chrisburnell.com edited /User:Chrisburnell.com (+15) (view diff)
[tantek], IWSlackGateway, barnabywalters, sonic and [schmarty] joined the channel
#
tantek.com edited /navigation (+363) "rename types of nav by name rather than level, move IndieMarks levels to its own section lower down in brainstorming" (view diff)
#
tantek.com edited /sequential_navigation (+14) "update redirect" (view diff)
#
tantek.com created /sequential_nav (+45) "r" (view diff)
#
tantek.com edited /link_prefetching (+703) "stub why, how to, IndieWeb Examples sections, in-line links to more docs on MDN" (view diff)
#
fab@redterminal.org created /User:Fab@redterminal.org (+506) "My initial user page" (view diff)
#
aaronpk 😮
#
aaronpk how did they get an @ in their wiki login??
[buddygoodboyes] joined the channel
#
tantek.com edited /link_prefetching (+143) "implemented rel-prefetch on my prev/next links for posts and days" (view diff)
#
[tantek] aaronpk, looks like there may be a bug in wiki IndieAuth handling if people auth with an email address as their rel=me with a one time link / code
#
[tantek] they have a rel=me to that email address on their home page (same domain) so perhaps IndieLogin is returning that as their "me" identity instead of just returning their home page?
#
[tantek] maybe a problem introduced with the wiki update?
#
aaronpk oh wow, it's a bug? in indielogin.com
#
aaronpk if you enter an email address in indielogin.com, it will prepend https:// to it, but that is still a valid URL
#
aaronpk https://aaron@parecki.com is a valid URL, aaron@ is the username part. so it goes and fetches the site passing in the "aaron" username and no password (http basic auth)
#
aaronpk and then it's prioritizing what the user entered, so it returns the url "https://aaron@parecki.com" to the wiki
#
aaronpk if I look through the logs, there's actually a bunch of people who are entering email addresses, but this is the first one that has resolved to an email address after logging in
#
[schmarty] omg
#
[schmarty] that's great! i mean it might be terrible, but it is interesting!
#
[tantek] not really, it results in URLs with bad UX
#
[tantek] might want to ban http basic auth from IndieAuth sign-in URLs
#
capjamesg[d] https://cdn.discordapp.com/attachments/866577502586273792/1272955072644649104/Screenshot_2024-08-13_at_17.28.33.png?ex=66bcdb4b&is=66bb89cb&hm=3d32a7a6ab6b3baa402b94c97d7959dea947bf32569c99e81acb105afd7cb159&
#
capjamesg[d] Discord's auto linker is behaving strangely on that URL aaronpk.
#
capjamesg[d] I have to hover my cursor over to see the aaron@ part.
[mattl] joined the channel
#
aaronpk i can imagine lol
[KevinMarks] and [snarfed] joined the channel
#
[tantek] I have removed http basic auth auto-linking from cassis, deliberately.
#
[tantek] I don't want to incentivize people publishing those URLs, if anything I want to disincentivize it
#
[snarfed] for anyone going to XOXO 2024, jump into the #indieweb channel on XOXO Slack, we'll hopefully try to organize an IndieWeb meetup during Fri Social, https://xoxofest.com/2024/schedule/social/
Ezri joined the channel
#
[tantek] [snarfed]++ awesome!
#
Loqi [snarfed] has 5 karma in this channel over the last year (100 in all channels)
#
aaronpk does this mean there is no IWC scheduled?
#
aaronpk I have stickers/buttons/etc that I need to coordinate to give someone if there is
#
[snarfed] I'm not authoritative, but yeah sounds like probably no IWC
ramsey, _DJ_[dj_je][d], _sisoma_new[d], sisoma_new[d], DJ_[dj_je][d] and Maplesyrup joined the channel