#meta 2024-08-16

2024-08-16 UTC
#
Loqi
Just generated the first draft of this week's newsletter! https://indieweb.org/this-week/2024-08-16.html I'll generate a draft again tomorrow, so please add to it before then! https://indieweb.org/this-week#How_to
Guest2031, [jeremycherfas], [schmarty], [jacky], [tantek], IWSlackGateway and Guest6 joined the channel
#
[tantek]
Welp. Last chance to get a location in the newsletter for IWC PDX
#
[tantek]
Aaronpk ^ also note new user with @ in URL in the newsletter
#
[tantek]
I am worried the newsletter may be a spam vector for that person which is undesirable
#
[tantek]
Spam bots that do sloppy regex detection of email addresses to spam
#
aaronpk
True, tho I imagine they are aware of that by creating a wiki page using an email address
#
aaronpk
you can't accidentally end up in this situation
#
[tantek]
I feel like you can because they didn't construct that URL, it was a side-effect of using a rel=me with an email address
#
[tantek]
like I don't think they have an actual http basic auth URL anywhere on their site, and if you enter just their domain URL, you get to choose the rel=me of their email address to verify your identity, which they presumably did, and then somehow the IndieAuth flow in IndieLogin produces that http basic auth URL
#
aaronpk
if they entered only their domain, it wouldn't have ended up with their email address in the wiki account
#
aaronpk
even if they only had a rel=me to their email address on their site
barnaby joined the channel
#
[tantek]
still seems like there's a UX bug somewhere that allows that rather than filters it
#
[tantek]
if that's the case
AramZS joined the channel
#
aaronpk
oh definitely
#
aaronpk
probably i should just not accept a URL in indielogin.com that has a user/pass component
stewalec joined the channel
#
Loqi
Generated a new draft of the newsletter! https://indieweb.org/this-week/2024-08-16.html
#
[tantek]
And then provide that guidance in the IndieAuth spec
#
Loqi
Generated a new draft of the newsletter! https://indieweb.org/this-week/2024-08-16.html
#
aaronpk
this is a relmeauth issue, indieauth already says user profile URLs can't have a user/pass component https://indieauth.spec.indieweb.org/#user-profile-url
#
Loqi
Generated a new draft of the newsletter! https://indieweb.org/this-week/2024-08-16.html
[0x3b0b] joined the channel
#
Loqi
Generated a new draft of the newsletter! https://indieweb.org/this-week/2024-08-16.html
[0x3b0b] joined the channel
#
Loqi
Generated a new draft of the newsletter! https://indieweb.org/this-week/2024-08-16.html
#
Loqi
Generated a new draft of the newsletter! https://indieweb.org/this-week/2024-08-16.html
#
Loqi
Generated a new draft of the newsletter! https://indieweb.org/this-week/2024-08-16.html
#
Loqi
Generated a new draft of the newsletter! https://indieweb.org/this-week/2024-08-16.html
#
Loqi
Generated a new draft of the newsletter! https://indieweb.org/this-week/2024-08-16.html
#
Loqi
Generated a new draft of the newsletter! https://indieweb.org/this-week/2024-08-16.html
barnaby and [schmarty] joined the channel
#
Loqi
Generated a new draft of the newsletter! https://indieweb.org/this-week/2024-08-16.html
#
Loqi
Generated a new draft of the newsletter! https://indieweb.org/this-week/2024-08-16.html
#
Loqi
Just generated this week's newsletter! You still have a few minutes to make changes, and I'll re-generate it 10 minutes before it gets sent out at 3pm Pacific time. https://indieweb.org/this-week/2024-08-16.html
#
Loqi
Generated the final version of the newsletter! This will be sent out at 3pm Pacific time. https://indieweb.org/this-week/2024-08-16.html
barnaby joined the channel
#
yabozdar.com
created /User:Yabozdar.com (+17) "User page of Yabozdar.com"
(view diff)