#social 2015-05-06

2015-05-06 UTC
LynnCyrin, bblfish, timbl_, Arnaud, tantek and pfefferle joined the channel
#
elf-pavlik
melvster1, sandro: have you considered using Common Name (CN) (URI-fied) from TLS cert used in response you get data from?
#
elf-pavlik
in practice i don't see way to make more granular claims about authority of the information in HTTPS response!
the_frey joined the channel
#
elf-pavlik
aaronpk ^
pfefferle joined the channel
#
elf-pavlik
"graph name" considered as authority / assumed source of this particular information
#
elf-pavlik
IMO both WebID and IndieWeb community seem not to incorporate any way of verifying if response has any authority
#
elf-pavlik
will need to write article about it, too much to try explain via IRC --- or let's meet today in Paris? :)
tantek, elf-pavlik_ and tantek_ joined the channel
#
elf-pavlik_
tantek, tantek_ good noon :)
#
elf-pavlik_
i very much enjoyed having chance to meet so many people from the WG in last days, sad that two of us couldn't even exchange handshakes :(
#
tantek
checks logs
#
tantek
has had to restart his IRC client due to flakey wifi at W3C #AC meeting and has likely lost any pms.
#
tantek
elf-pavlik_: glad you got to meet more people in the WG! Sorry we were not able to meet this time. Perhaps in a future f2f.
#
deiu
tantek, you may want to take a look at http://shout-irc.com/
#
deiu
You'll love it
#
elf-pavlik
deiu, i used it in last days but at least my deployments sometims looses connection :(
#
elf-pavlik
back from xChat today
#
deiu
I've never had any problems with it
#
elf-pavlik
tantek, if you feel like shaking hands even shortly 2-3min, let me know when/where i could catch you and i would possibly show up :)
#
tantek
elf-pavlik: you could try to sneak into W3C AC meeting lunchtime BOFs where #2 BOF is "Social Web"
#
elf-pavlik
tantek, timespace details?
#
tantek
I'm not actually sure when lunchtime is
#
elf-pavlik
rhiaro, maybe we could meet there first as well?
#
elf-pavlik
i could use some sunshine anyhow, location?
#
tantek
assuming it's at the Novotel where the W3C AC meeting is in general.
#
Loqi
@elfpavlik :: @kaepora would you like to meet for lunch today ~ Gare du Nord or for dinner anywhere we could cook together? theme: HTTPS, TLS, WebID
#
elf-pavlik
WebID / IndieAuth URL :)
#
tantek
deiu - could you add IRC tool suggestions / improvements to https://www.w3.org/wiki/Irc ?
#
deiu
tantek, definitely
#
deiu
off the record, W3C is interested in updating the web client
#
deiu
no concrete decision on what it will be though
#
Loqi
@poulpita :: [W3C fanclub] Robin, Robin, Robin ! Poke @robinberjon https://twitter.com/poulpita/status/595875359154909185/photo/1
#
elf-pavlik
tantek, aaronpk i even mentioned you ~2 weeks ago in that IRC facelift issue https://github.com/w3c/modern-tooling/issues/16#issuecomment-95575259
pfefferle joined the channel
#
tantek
Novotel Tour Eiffel - does that help?
#
elf-pavlik
yes, thank you - Way: Hôtel Novotel Paris Tour Eiffel (115878663)
#
elf-pavlik
i'll come over there in ~1h, hopefully will find wlan to gret on IRC...
#
elf-pavlik
s/gret/get/
#
tantek
elf-pavlik: some of us have been able to use SSID "orange" after clicking through a bunch of captive portal forms.
#
elf-pavlik
rhiaro, would you like to meet at Novotel first and then got together to the flat bblfish lives with Gordana and little Trinity? (i formulate it this unusual way, to not only use e-prime but also prefer non possesive form of relating agents and things :)
#
elf-pavlik
maybe shouldn't discuss it via this IRC channel since not relevant to most ppl - still finding my way in IRC culture ...
Arnaud1 and pfefferle joined the channel
#
elf-pavlik
leaving to Novotel Tour Eiffel ...
#
bblfish
rhiaro or other people in Paris, if you are near Gare du Nord, Gare de l'Est ( which are next to each other ) you can call me on my cell phone to meet up +33-6-38-32-69-84
pfefferle and elf-pavlik joined the channel
#
ben_thatmustbeme
no messages for you elf-pavlik :P
#
elf-pavlik
no one likes me :'(
#
elf-pavlik
happy that could also meet tantek IRL, hoping to have chance to meet all you crazy folks sooner or later ;)
#
ben_thatmustbeme
so the babies stayed in
#
elf-pavlik
babies++
#
Loqi
babies has 4 karma
#
ben_thatmustbeme
i doubt I will be headed to europe any time soon
#
ben_thatmustbeme
really wishing i could go to japan for f2f... but i think my wife would kill me
tantek joined the channel
#
elf-pavlik
i also can't leave part of european continent, till we transition to modern identity systems :(
#
elf-pavlik
so we may enjoy online collaboration before we can shake hands IRL :S
#
ben_thatmustbeme
speaking of which, you were asking about micropub querying for supported endpoints
#
ben_thatmustbeme
s/endpoints/syndication points/
#
elf-pavlik
so client e.g. my web browser will get x-www-form-encoded response
#
elf-pavlik
do you parse it with some standard javascript functions?
#
elf-pavlik
ben_thatmustbeme can i sindicate to other micropub endpoints?
#
ben_thatmustbeme
i parse it from PHP and send that down to the user. when they log in to the system i have to check that they have a micropub endpoint so I fetch that info then
#
elf-pavlik
i don't understand 'parse it from PHP'
#
elf-pavlik
didn't touch PHP for ages :P
#
ben_thatmustbeme
I don't see why not. really the "syndicate-to" is just a control function to the server software. those values could be anything at all that the software can support
#
elf-pavlik
ben_thatmustbeme how you authenticate in such case micropub to micropub (server 2 server) ?
#
aaronpk
i think he means the browser is not talking to the micropub endpoint directly, the browser is talking to his php server which is talking to the micropub endpoint
#
elf-pavlik
action-54
#
trackbot
is looking up action-54.
#
trackbot
action-54 -- Pavlik elf to Investigate 'my client' to 'someone else server' authentication -- due 2015-04-21 -- OPEN
#
elf-pavlik
i also think about capturing this thought about daemon process acting as client and browser app action as client
#
ben_thatmustbeme
when the browser loads the UI for posting it already has the syndicate-to values. my server grabs that info when they log in, and pushes the html
#
elf-pavlik
so you never query micropub endpoint from browser app?
#
elf-pavlik
apologizes for ignorance on how you do things and tries to understand it better
pfefferle_ joined the channel
#
ben_thatmustbeme
no, everything goes to the micropub app's server first, then to users site from there
#
ben_thatmustbeme
no, quite alright. I found its easier / better to use the server code to do it, rather than trust JS
#
elf-pavlik
trust with what?
#
ben_thatmustbeme
pushing actual data to MP endpoint
#
ben_thatmustbeme
also, to be able to submit to MP endpoint directly from client app, the auth info would have to be sent down to the browser. that system does not do that
#
ben_thatmustbeme
but it can be done in just JS, as I did with mobilepub
#
elf-pavlik
i need to see some flow diagrams for indieauth and micropub ...
#
elf-pavlik
sequence diagrams
#
ben_thatmustbeme
good thinking
#
aaronpk
elf-pavlik: it's basically oauth 2.0, so you can go look for one
#
aaronpk
bret made this one, but it doesn't have any numbers so you can't see the order of things http://indiewebcamp.com/auth-brainstorming
#
aaronpk
that page also walks through the whole flow
#
elf-pavlik
oh, i keep mixing it with http://unhosted.org
#
elf-pavlik
so all your apps have server side component?
#
elf-pavlik
unhosted can ran from localhost since you just need to load HTML5 app
#
elf-pavlik
s/ran/run/
#
aaronpk
there are some mobile phone apps that don't have a server-side component
melvster joined the channel
#
aaronpk
it's just that nobody has written a JS-only app yet for whatever reason
#
ben_thatmustbeme
elf-pavlik: Mobilepub is entirely JS, and HTML5.
#
aaronpk
sorry yeah, nobody has written a browser-based JS app
#
ben_thatmustbeme
it almost works in the browser, but i believe you can't log in because of CORS
#
elf-pavlik
ben_thatmustbeme can you point me directly to line where you parse form-encoded responses from querying micropub?
#
aaronpk
if anybody cared enough we'd fix it :)
#
elf-pavlik
i can understand js way better than php :)
#
elf-pavlik
nothing to feel proud of ...
#
elf-pavlik
rhiaro do you get your markdown this way /
#
ben_thatmustbeme
elf-pavlik: normally this requires auth, but i'll open it up for a few
#
elf-pavlik
where do you have code parsing it?
#
ben_thatmustbeme
some extra data from my syndication sites leak there
#
ben_thatmustbeme
i haven't used that in JS
#
ben_thatmustbeme
but it would work just the ame as the link i linked you do in mobilepub
#
elf-pavlik
someone needs to write library for that or just use shims from browserify
#
elf-pavlik
hmmmm.... may take browserifying something like https://www.npmjs.com/package/body-parser
#
elf-pavlik
wishes for JSON :)
#
elf-pavlik
ben_thatmustbeme does form-encoded == URL-encoded form body ?
#
elf-pavlik
would "OAuth 2.0 implicit-grant flow" work with micropub ?
#
aaronpk
it could I think, but you can also just do authorization code flow just fine
#
ben_thatmustbeme
messing with accept headers now :)
#
elf-pavlik
conneg++ :D
#
Loqi
conneg has 2 karma
#
ben_thatmustbeme
i'll be honest, i think the code to write it out to JSON is easier than to form encoded
#
aaronpk
i think supporting JSON as a response format is fine
#
elf-pavlik
aaronpk, i see myself uncapable to discuss OAuth stuff, but let's talk about it in Dusseldorf with fkooman and michielbdejong (remotestorage spec editor)
#
elf-pavlik
aaronpk++
#
Loqi
aaronpk has 797 karma
#
elf-pavlik
dances relieved
#
aaronpk
i'm more concerned with making people parse JSON requests
#
elf-pavlik
can we do research in existing tooling?
#
elf-pavlik
IMO nowadays anyone doing api parses json
#
aaronpk
except for everyone who has written a micropub endpoint ;)
#
elf-pavlik
do you think you already reached critical mass in deployment? ;)
#
elf-pavlik
will not get to far into discussing form-encoded vs. JSON today ...
#
aaronpk
here is an example of the kind of problem encountered when people are trying to process json requests http://stackoverflow.com/questions/19626275/rails-action-to-accept-json-as-input-convert-json-to-object-and-then-save
#
bblfish
before this WG meeting, we were boxing in the dark https://www.youtube.com/watch?v=6TqVJPkIXdY
#
tantek
notices activity here
#
elf-pavlik
sitting just outside next to broken coffee machine
#
aaronpk
not really
#
aaronpk
i-json is hilarious. sadly they didn't even specify enough to make it make sense
#
aaronpk
they should have just said all dates must be iso8601 but couldn't even assert that
#
tantek
elf-pavlik: re: "i can understand js way better than php" - then you can use CASSIS.js to understand PHP :D
#
elf-pavlik
"I need to make an API with my application and then use it with my iOS app! Thanks for your help. First day with Rails :( "
#
tantek
aaronpk: hahaha seriously? wow
#
elf-pavlik
cassis.js++
#
tantek
Loq, do you not like "."s in terms to ++?
#
tantek
Loqi ^^^
#
tantek
gives Loqi an espresso
#
ben_thatmustbeme
Loqi does some magic on looking for punctuation i know
#
Loqi
cassisjs has 1 karma
#
bblfish
can't ++ a URL
#
Loqi
@elfpavlik :: Blindfold Boxing - @bblfish comments on early days of @SocialWebWG https://www.youtube.com/watch?v=6TqVJPkIXdY&feature=youtu.be - http://socialwg.indiewebcamp.com/irc/social/2015-05-06/line/1430917164811 #IndieWeb
#
Loqi
c has 49 karma
#
elf-pavlik
hmmm it could recourse if twitter links could link both way?
#
elf-pavlik
oh that comes from me using http://shout-irc.com/
#
elf-pavlik
IndieWeb++ we start having more and more fun on #social :D
#
Loqi
IndieWeb has 4 karma
#
elf-pavlik
IndieWebCamp++
#
Loqi
IndieWebCamp has 4 karma
#
deiu
aaronpk, "aaronpk: it's just that nobody has written a JS-only app yet for whatever reason" <- what did you mean by that?
#
aaronpk
nobody in #indiewebcamp
#
tantek
js;dr
#
aaronpk
and i meant browser-based, because ben wrote a JS app for android
#
aaronpk
nobody has even made a JS reader, or JS micropub client tho
#
Loqi
cordova has 2 karma
#
ben_thatmustbeme
aaronpk: the question I always ask, is that just because the community isn't really populated with JS people?
#
aaronpk
i haven no idea
#
tantek
ben_thatmustbeme: I like JS and develop with it
#
aaronpk
i mean i'm pretty sure all of us have written JS for our sites and apps
#
ben_thatmustbeme
tantek: do you use micropub?
#
tantek
you might mean, not really populated with JS-only people - who tend to not care about longevity
#
tantek
ben_thatmustbeme: not yet :(
#
aaronpk
and there are even some node.js backends
#
Loqi
*sniff*
#
ben_thatmustbeme
the next question is, is there a limitation to JS client. I know CORS can be problematic at times
#
aaronpk
i think you can get around CORS if the server allows it, which if you're talking about your own micropub endpoint then you can do that
#
aaronpk
but i haven't tried because i don't really care to
#
ben_thatmustbeme
and I always find its too much work to get people to figure out the magic file to allow that... i always forget how
#
elf-pavlik
tantek: please note possible way to enable easy browser | server rendering to HTML https://github.com/w3c-social/social-arch/issues/1
#
elf-pavlik
aaronpk, please wait for Dusseldorf and http://unhosted.org / http://remotestorage.io examples
#
aaronpk
sure, i'll wait for them to tell me how they expect the content to persist in the long term :)
#
aaronpk
i'm not saying JS apps are bad, just that I don't have any desire to write one
#
elf-pavlik
let's wait for upcoming weekend to build more multi-directional understanding
#
aaronpk
and JS apps are very different from content that requires JS to view
#
elf-pavlik
with standard templating you can render stuff on the backend, also people try stuff like https://prerender.io/
#
bblfish
one can work with CORS, but it is easier I think to proxy it, which is fine for public content, but will require a lot more thought for access controlled resources.
#
elf-pavlik
bblfish, true! couple of times i got stuck on Mozilla Persona not playing well with CORS https://developer.mozilla.org/en/Persona/Security_Considerations#Explicitly_specify_the_audience_parameter
#
tantek
aaronpk - even on a short timeline, JS-only content dies.
#
tantek
hence js;dr elf-pavlik
#
aaronpk
right, JS content I have an issue with. JS apps are fine because apps shoudln't be storing content
#
elf-pavlik
one can gracefully degrade and render content on backend as i said
#
deiu
aaronpk++
#
Loqi
aaronpk has 798 karma
#
tantek
elf-pavlik: s/one can/one must
#
elf-pavlik
tantek++
#
Loqi
tantek has 187 karma
#
elf-pavlik
deiu, bblfish we really need to sort out https://github.com/w3c-social/social-arch/issues/1
#
tantek
elf-pavlik: does anyone use unhosted or remotestorage for their personal site?
#
tantek
clicks link
#
elf-pavlik
http://viejs.org/ does it but uses pre 1.0 JSON-LD and pre 1.1 RDFa
#
deiu
elf-pavlik, how/why is that relevant for me?
#
elf-pavlik
server can render content stored and serve it when text/html requeted
#
elf-pavlik
deiu: see http://viejs.org/examples/todo/ bergie wrote it sitting next to me in c-base berlin
#
deiu
Why does it have to produce RDFa?
#
elf-pavlik
so ho have HTML
#
elf-pavlik
i like *raw* but tantek also have point that text/html matters
#
elf-pavlik
for js;dr
#
deiu
So you consume structured data to produce structured data through who knows how many HTTP roundtrips?
#
elf-pavlik
also accesibility may not work with raw data as for today - which i believe will change
#
deiu
Waste of time (and bandwidth)
#
tantek
adds to social-arch issues 1 hopefully in a productive way
#
elf-pavlik
no client can request text/html and SoLiD server will render it
#
tantek
oops markdown sucks
#
tantek
markdown--
#
Loqi
markdown has 0 karma
#
elf-pavlik
rhiaro ^
#
deiu
Producing text/html is great. Producing text/html *WITH* RDFa is silly
#
deiu
our servers do that already
#
deiu
(minus the RDFa bit)
#
elf-pavlik
deiu how do you serialize RDF to HTML using template
#
deiu
that's the html view of my raw profile data
#
elf-pavlik
notice current duplication on template rendering my homepage https://github.com/elf-pavlik/webprofiled/blob/master/views/profile.hbs
#
tantek
wow markdown really does suck
#
tantek
e.g. overinterprets: "p-*, export"
#
tantek
as meaning apply * emphasis to ", export"
#
tantek
markdown should be called markdumb
#
tantek
markdown--
#
Loqi
markdown has -1 karma
#
tantek
markdown fail
#
tantek
ok I added an extra space to pacify markdown
#
tantek
elf-pavlik: added to https://github.com/w3c-social/social-arch/issues/1 - hopefully my comment is helpful
#
deiu
I see what you mean
#
elf-pavlik
curl https://wwelves.org/perpetual-tripper/ -H "Accept: application/ld+json"
#
deiu
Ok, let me rephrase it, how many websites do you consume through curl?
#
elf-pavlik
conneg++
#
Loqi
conneg has 3 karma
#
deiu
the fact that we run a js skin to serve html doesn't mean that we can't change it to use a different translation engine instead of js
#
deiu
anyway
#
elf-pavlik
today i'll add text/turtl
#
bblfish
btw, the server I have does show default html views built out of JS for users that come at it with browsers
#
bblfish
( that is rww-play )
#
bblfish
of course one could also have the server write static html built by fetching Linked Data on the web - it's just less dynamic, and so less cool nowadays )
#
bblfish
it does not really matter where the rendering is done in fact as @deiu says. What is important is that all the data is fetching in a Linked Data manner, and worked with as Linked Data - for us.
#
bblfish
Because otherwise you end up loosing information in the UI.
#
bblfish
so you want to be able to tell for each piece of information being shown "who said it, etc"
#
bblfish
where it came from...
#
bblfish
need to deploy it next few days to start playing with Deiu's apps.
almereyda and tantek joined the channel
#
elf-pavlik
after talking to deiu adds to READ LATER list http://www.w3.org/TR/rdf11-datasets/
#
elf-pavlik
bblfish please always see you web pages in a browser with disabled javascript ... http://www.wikihow.com/Disable-JavaScript
#
tantek
elf-pavlik++
#
Loqi
elf-pavlik has 25 karma
bblfish joined the channel
#
bblfish
that would be another layer to make it work without JS too. I am sure that can be engineered, but it's another level of complexity
#
elf-pavlik
bblfish, i don't call what you do 'wrong' just for some people it doesn't meet requirements they take as MUST (without judging this decision as 'right' or 'wrong')
#
elf-pavlik
decision of taking such requirement - we all need to address different needs and have different priorities
#
bblfish
did I say you called pure JS apps wrong?
#
bblfish
what I am saying there is nothing in what we do that does not allow pure JS and static html simultaneously.
#
bblfish
it's just that static html sites are well known, and the dynamic RDF based ones are what we are exploring here
#
bblfish
Ie, you could find a way to render the site on the server if JS is not enabled. Not sure exactly how one would do it. It would also require thinking through the site at the dynamic and the non dynamic way simultaneoulsy.
#
elf-pavlik
in version i started working at you place i subscribe to server with SSE and re render *the same* template in browser when data changes
#
bblfish
what page does that generate?
#
bblfish
where is that live?
#
elf-pavlik
follow your foaf:knows :)
#
elf-pavlik
my WebID
#
elf-pavlik
when i deploy updated version, when i POST new place e.g. Dusseldorf it will re-render in your browser without reload
#
elf-pavlik
using *same* template as it rendered it originally on the server to show static js;dr site
#
elf-pavlik
i'll deploy it this weekend and maybe can do micropub check-in to update list of places on my home page (using side effects on the server just to explore how it would work)
#
bblfish
but that's not a dynamic JS site is it?
#
bblfish
the way Facebook is
#
elf-pavlik
bblfish, i didn't deploy the dynamic version yet, i can push work-in-progress branch to github just so you can see it... wait
#
elf-pavlik
i work on merging webprofiled with plp-provider
#
elf-pavlik
this version does what i said, renders static event page and if someone will checkin it will update attendees list in real time :)
#
elf-pavlik
unless js disabled, than you need to reload to see updated list of attendees
tilgovi joined the channel
#
bblfish
well so its possible to do both then :-)
#
elf-pavlik
bblfish but i use js both in browser and with node.js / io.js on server - we can NOT assume that
#
elf-pavlik
but we could use something like https://mustache.github.io/
#
bblfish
There are many different ways it can be done for sure. That's not a problem
#
elf-pavlik
i happen to use on my website extended mustache - http://handlebarsjs.com/
#
elf-pavlik
bblfish, once people running python, php, ruby etc. backends can do that, i will consider your statement valid
#
elf-pavlik
also scala-js doesn't answer this issue since not all languages can compile to js
#
elf-pavlik
and we shouldn't expect everyone to use javascript or scala(js) on the server side
#
elf-pavlik
php, python, ruby, go, java etc.
#
elf-pavlik
i would even say MUST NOT
pfefferle joined the channel
#
bblfish
that's not a problem Elf. If people can't do dynamic web sites the way you do, they can do static web sites
#
elf-pavlik
bblfish SoLiD allows it?
#
elf-pavlik
issue-24
#
trackbot
issue-24 -- Do we put requirement on supporting static websites? -- open
#
trackbot
is looking up issue-24.
#
elf-pavlik
allows it - accounts for it and still interoperates
#
bblfish
In my view yes. Andrei has been exploring how far he could push things, but the main part of SoLiD is that all the data used to build the web site is RDF and write operations use LDP.
#
elf-pavlik
what about read text/html ?
#
bblfish
that's what I mean by static web sites
#
elf-pavlik
1) no Content-Negotiation (or just text/html)
#
bblfish
the server serves text/html
#
elf-pavlik
2) no control over headers
#
elf-pavlik
3) GET only
#
elf-pavlik
2) no control over HTTP headers / you can use <link rel="" ...> in HTML head though :)
#
deiu
4) is bad design
#
bblfish
no clearly a SoLiD server is one that does have content negotiation. But nothing says it cannot serve a static html view
#
deiu
You need to wait for the data to arrive, parse it, just to get to the Link value
#
elf-pavlik
I don't +1 this but if it could work you wouldn't need to discuss 4) with tantek and possibly other people
#
deiu
You could have done a HEAD instead
#
bblfish
nothing says that a SoLiD server cannot work with data served from non SoLiD web servers.
#
deiu
HEAD requests are really useful
#
bblfish
In fact most of the RDF we use is served by simple static html web sites
#
elf-pavlik
deiu in such case we need to resolve issue-24 and not support static websites
#
aaronpk
i like HEAD requests too, but can you really get your Amazon CDN to support your head requests?
#
bblfish
SoLiD just enables the Read-Write Web
#
deiu
aaronpk, I hope we can convince them
#
aaronpk
it's not just about static websites, it's also about sites using a CDN
#
deiu
there must be a way to get to set some headers
#
bblfish
I mean by static web site, one that serves html
#
elf-pavlik
i raised this issue during last f2f and with tantek support we opened it just so we can find common assumption here
#
bblfish
I mean by static web site, one that serves html that makes sense without JS
#
bblfish
I don't think that's of much interest to us
#
bblfish
that's a deployment issue
#
bblfish
we're trying to build something that competes with large existing social networks here, not something that is brain dead
#
bblfish
put it another way:
#
deiu
I wouldn't call it "brain dead"
#
bblfish
static web sites as you define them can pubish static linked data
#
deiu
I just hope we'll reach consensus and more importantly, convergence
#
deiu
(in a timely manner)
#
aaronpk
i am saying the canoncal source of the content cannot be required to support arbitrary HTTP requests. offload anything that can't be served with a simple web server to another endoint
#
bblfish
yes, though as I said that's not my use case
#
bblfish
seems like a very particular use case. I wonder if one needs to spend that much energy on such a use case
shepazu_ and cwebber2 joined the channel
#
aaronpk
no, it's the other way around. we're less likely to see an API be used if it has high requirements for deploying.
oshepherd joined the channel
#
aaronpk
this is why wordpress is still so popular, because it can be run on almost any hosting provider
#
bblfish
you just shifted the requirements for deploying to some other place
#
aaronpk
yes, delegation
#
elf-pavlik
I would propose adding notes to issue or wiki and not try to convince each other during single irc session
#
aaronpk
separation of concerns
#
bblfish
I am more in favor of first getting smoething to work correctly, the doing duck taping
#
elf-pavlik
let's please try to UNDERSTAND each other first before developing opinions about other's preferences / ideas
#
bblfish
then at least one is working with the web not against it
#
bblfish
elf-pavlik: I understand aaronpk's position. It's just not my main concern.
#
bblfish
I'd say it's interesting to be able to support such sites, but then why is that a social web problem, and not a general problem that may need its own standardisation effort?
#
bblfish
essentially the standard group could be called: doing HTTP modifications over POST
tantek joined the channel
#
bblfish
a better name: the Static Web WG
#
aaronpk
i don't understand what just happened here
#
elf-pavlik
bblfish we can conclude that two groups need to work with different set of requirements
#
elf-pavlik
but let's take more time to UNDERSTAND different factors rather than try to conclude in such ways prematurely
#
bblfish
that may be, but one requirement is not really a social web requirement. It's a generic requirement for how to do PATCH, PUT, DELTE, SEARCH over POST
#
elf-pavlik
deiu i started thinkering and sketching cases for SoLiD test suite which tests ACL including different variants of list membership relations, inverse relations etc.
#
elf-pavlik
it might get complex if we support multiple subjects described in single resource, especially when we use inverse properties (let's say situation where one ended up with memberOf and no member for groups, in practice 'tag' property works in this way) @ rhiaro
#
elf-pavlik
disclaimer - i just try to understand how SoLiD handles things and possibly have very wrong understanding, especially how it manages named graphs in quad stores
#
elf-pavlik
which one does NOT have to use!
#
bblfish
elf-pavlik: LDP says nothing about quad stores
#
bblfish
I save my files on my hard drive
#
bblfish
so we end up with .ttl files on the server ( could be json-ld of course ), pictures, videos, etc...
jaywink joined the channel
#
bblfish
so that's pretty static in fact.
#
bblfish
Perhaps we already have the static web site come to think of it...
#
elf-pavlik
bblfish how do you query data?
#
bblfish
QUERY is not defined in LDP
#
elf-pavlik
not QUERY
#
bblfish
all the verbs are optional btw
#
bblfish
currently I am playing with SEARCH verb and GET with Query.
#
elf-pavlik
i understand that you can only query ldp:Resource not the 'whole dataset on this server'
#
elf-pavlik
bblfish i know you experiment with it ...
#
bblfish
well so either you GET the whole file, or if you have it available you can optimise with SEARCH verb
#
elf-pavlik
i didn't say 'file' i said dataset e.g. i cache foaf profile of my friends and their friends in this case i can ask "my friends and their friends who live in Paris"
#
elf-pavlik
to answer it fast i need local cache and index, otherwise it will take long time to answer it making 1000s of requests
#
bblfish
As I said that's not covered for the moment. SEARCH could play that role though
bblfish joined the channel
#
elf-pavlik
bblfish SEARCH what, content of a file?
#
elf-pavlik
but i must say it makes ACL much more straight forward
#
elf-pavlik
if you can query dataset which has ACL on resources it can drive you mad
melvster and bblfish joined the channel
#
elf-pavlik
issue-24
#
trackbot
is looking up issue-24.
#
trackbot
issue-24 -- Do we put requirement on supporting static websites? -- open
#
elf-pavlik
aaronpk, deiu: we may end up with - no ACL if you run static page = public content only
#
elf-pavlik
!tell tantek can you demo static site with ACL? i just suggested that we may draw line on static site -> no ACL (public content only)
#
Loqi
Ok, I'll tell him that when I see him next
#
ben_thatmustbeme
elf-pavlik: i think thats a pretty reasonable thing. unless someone can do that internally. The basic idea for static sites thus far has been do security through obscurity
#
ben_thatmustbeme
site.com/<somelongstringofchars>/post
#
ben_thatmustbeme
but static sites should still be able to access private data from others
#
elf-pavlik
how static sites access data?
#
elf-pavlik
we really need to work on syncing our terminologies
#
ben_thatmustbeme
okay, site A has an ACL on a post for site B to access
#
elf-pavlik
how static site *accesses* something ?
#
ben_thatmustbeme
even though site B is static, that should not effect Site B's owner from being able to access Site A's post
#
elf-pavlik
or the person using static site as identity?
#
elf-pavlik
using e.g. app (native, HTML5 .js <3 )
#
ben_thatmustbeme
having a static site for identity should not hinder a person's ability to access ACL'd data
#
elf-pavlik
what is IdP?
#
elf-pavlik
so just IndieAuth part ?
#
rhiaro
That's fine, the site with the ACL is not static
#
rhiaro
The static site can delegate indieauth
#
ben_thatmustbeme
exactly, what i mean, but i was trying to put it more generically
#
rhiaro
eg. http://tigo.rhiaro.co.uk/ my bird's webpage is static but, should he learn how to use a computer, he can sign into the indiewebcamp wiki, which is not static
#
elf-pavlik
ben_thatmustbeme what do you think about capturing it on http://indiewebcamp.com/static-site ?
#
elf-pavlik
IMO mostly IndieWeb community cares about 'static websites'
#
rhiaro
so I think we're all good here. If others agree that saying we can't support ACL for static sites is reasonable
#
rhiaro
if someone figures out how to do that with delegation we can rethink :)
#
elf-pavlik
aaronpk can one delegate micorpub ?
#
ben_thatmustbeme
elf-pavlik: thats fine. not sure its really needed
#
ben_thatmustbeme
elf-pavlik: yes, thats totally find to delegate micropub
#
ben_thatmustbeme
and have some other way to post back
#
ben_thatmustbeme
allows to have bridge to site by some micropub -> something else
#
elf-pavlik
ben_thatmustbeme that gets less and less static ;)
#
ben_thatmustbeme
elf-pavlik: yes, and no
#
elf-pavlik
webhooks, authorization etc.
#
ben_thatmustbeme
some people use GIT to manager their website
#
ben_thatmustbeme
the hosted code is HTML, but their MP endpoint is just writes files and git push, or rysnc, etc
#
elf-pavlik
ben_thatmustbeme i would really ask IndieWebCamp community to document it more precisely so we can all evaluate it seriously
#
ben_thatmustbeme
github pages are used as well by some
#
elf-pavlik
please understand that WG members from other backgrounds may find it quite a limitation to what we can do
#
elf-pavlik
having it well documented will allow everyone to understand various nuances of what we call *static* and what *static on steroids* etc.
#
ben_thatmustbeme
there are definite limitations, thats for sure
#
elf-pavlik
deiu, i hope this static sites conversation didn't throw you off... we still have issue-24 open and i see current conversations more of finding understanding
#
elf-pavlik
also documenting well all the *responsibilities* in the system and where one could place them (also delegate) will make such conversations much more concrete
LCyrin, jaywink, KevinMarks, tantek and tilgovi joined the channel
#
melvster
there seemed to be some consensus around making webmention a standard
#
melvster
from what i saw yesterday
Arnaud joined the channel
#
elf-pavlik
aaronpk could you try to watch video embedded at the bottom of http://sockethub.org/ before weekend?
#
elf-pavlik
4 friends from unhosted ( melvster knows them all ) will come for the IWC and we can discuss no-backend apps with them
#
aaronpk
is there a tl;dr version of the video?
#
elf-pavlik
just of remote storage i think... let me find a link https://unhosted.org/
#
rhiaro
aaronpk +1 getting an intro to unhosted
#
aaronpk
webfinger?
#
elf-pavlik
aaronpk, just to get concept, SoLiD has a lot in common and I see no problem dashing webfinger from unhosted
#
elf-pavlik
and use link relation from profile instead of JRD
#
elf-pavlik
looking for slides from Nick's talk
#
aaronpk
i think i can only hold a few different models in my head simultaneously. there were at least two people who said they had a good idea of how SoLiD maps to ActivityPump and Micropub, so I think I'm going to focus on those two
#
elf-pavlik
sure, unhosted has similar approach to SoLiD clients run on device (mostly web browser) while MicroPub clients run on the remote server ...
#
aaronpk
micropub clients *can* run on a device and local browser
#
rhiaro
aaronpk: unhosted is personal data store + pure client side apps that you authorize to use your store. It has good offline capabilities too
#
elf-pavlik
and Sockethub uses AS (now migrating to AS2.0) in simlar way to ActivityPump
#
elf-pavlik
but it can POSSE to IRC, SMTP and XMPP
#
rhiaro
Aside: Unhosted was my entrypoint into decentralized web
#
elf-pavlik
while storing your original posts in remoteStorage (but for now only JSON and no server side rendering :S)
#
elf-pavlik
unhosted++
#
Loqi
unhosted has 2 karma
#
rhiaro
Anyway, probably bed time
#
elf-pavlik
aaronpk here you go http://elf-pavlik.github.io/sockethub-presentation/#/ (i forked it since he didn't have gh-pages branch
#
elf-pavlik
ben_thatmustbeme ^
tantek joined the channel
#
elf-pavlik
oh Sockethub also had some POSSE to twitter and facebook
#
aaronpk
whoa sockethub is all ativitystreams based
#
elf-pavlik
yes and nick does AS2.0 version now
#
aaronpk
so it's basically describing a way to create client-side apps
#
aaronpk
and has mappings from AS vocab to different backends like twitter facebook email etc
#
elf-pavlik
not mapping but ~ proxy Sockethub
#
aaronpk
right, a mapping
#
elf-pavlik
and it keeps your personal original in remoteStorage
#
aaronpk
i write code that speaks AS, and it turns it into a FB post
#
elf-pavlik
he can explain it in detail next weekend
#
elf-pavlik
on client/server note micropub clients run on servers and micropub server syndicates to silos as client as well as uploads files as client
#
elf-pavlik
we need to stay careful when talking about client/server as bblfish tries to point out often
#
aaronpk
i keep saying micropub clients don't need to be on servers... for example ben_thatmustbeme's client which is on a PHONE which is not a server
#
elf-pavlik
ben_thatmustbeme how do you do IndieAuth from it?
#
aaronpk
the redirect URI in IndieAuth and OAuth 2.0 can be a local URI
#
aaronpk
like myapp:// or http://localhost/
#
melvster
aaronpk: i would have preferred a version of remote storage without webfinger
#
elf-pavlik
webfinger--
#
Loqi
webfinger has -6 karma
#
melvster
but that doesnt seem likely in the short term
#
elf-pavlik
have you noticed no webfinger in ActivityPump? https://github.com/w3c-social/activitypump/pull/1
#
aaronpk
side note: why are all of these SIP providers such a PITA to deal with
#
aaronpk
I signed up with plivo, but they won't even let me add money to my account to use it
#
aaronpk
I signed up with sipgate, but they require a manual review before they'll let me sign in, so I have to wait until they wake up
#
elf-pavlik
looks like internet doesn't want you to make that call ;)
#
aaronpk
can't i install my own sip server somewhere?!
#
melvster
elf-pavlik, aaronpk: what we learn about when taking a first stab at the use case, is that there's a pre requisite for swat0 of following which is not described in the uses cases yet
#
aaronpk
besides following?
#
elf-pavlik
aaronpk i use perpetual-tripper@wwelves.org with mailto: and xmpp: years ago i also supported sip: and acct:
#
melvster
it would be nice if we could list and solve the dependencies of swat0 before tackling the 5 points
#
elf-pavlik
needs to go to sleep
#
aaronpk
elf-pavlik: which sip provider do you use?
#
elf-pavlik
aaronpk i used to run server myself but don't do it any more
#
aaronpk
melvster: listing out the dependencies sounds like a good idea
#
elf-pavlik
for Zakim i just use now ekiga.net or linphone.org
#
melvster
aaronpk: what we learnt from your presentation is that some of the use cases are slightly ambiguous or have some assumptions that are not explicitly stated, so if those could be worded less ambiguously, it would maybe give a better chance of the implementations interoperating
#
melvster
but given swat0 is the only approved one
#
melvster
it would be nice to know what is needed before you can attempt it
#
aaronpk
yeah, I definitely found ambiguities and missing things in the stories as written
#
rhiaro
I use linphone
#
rhiaro
zzzzzz
#
aaronpk
omg i think linphone actually worked
#
elf-pavlik
good night #social
Arnaud1 joined the channel
#
oshepherd
I think the definition of "static site" should be that at least the public HTML is statically generated, and perhaps also the public data
#
oshepherd
You might have a dynamic "backend" but that is only necessarily used for editing + site owner private data
#
tantek
checks logs
#
Loqi
tantek: elf-pavlik left you a message 4 hours, 26 minutes ago: can you demo static site with ACL? i just suggested that we may draw line on static site -> no ACL (public content only) http://socialwg.indiewebcamp.com/irc/social/2015-05-06/line/1430936871215
#
tantek
elf-pavlik: my site is neither static nor has ACL :/
#
tantek
well, my home page at least
#
tantek
and posts 2010-001 to present
#
tantek
my old blog is 100% static HTML+CSS (2002-2008)
#
tantek
no ACL - however I did vary robots/indexing allowance over time - so my old posts are not googleable - a gray area of ACL
#
tantek
you could do a static site with ACL via a JS embed
#
tantek
at least for user viewing
almereyda joined the channel
#
tantek
harder scenario is static site + ACL for server-to-server requests (e.g. webmention responding)
#
oshepherd
You could always generate a static site for "logged out" users, and if somebody logs in they get the dynamic version
#
tantek
oshepherd: yes - such a hybrid would make a lot of sense as it still has a lot of the security / DDoS benefits of a static site.
#
oshepherd
And really server-side static site gen is pretty easy compared to crazy hybrid client side JS+server side templating schemes
#
tantek
totally agreed.
#
tantek
thought the react.js sites / approaches I've seen seem fairly reasonable and not really crazy
#
tantek
perhaps React is an exception
#
tantek
oshepherd: apologies if this is a dumb question: do you have any experience with publishing or consuming AS1/Atom - in particular activities like "likes" ?
#
oshepherd
No, all of my AS1 experience is AS1 JSON
#
oshepherd
Heh, ReactJS' "JSX" compiler re-invents E4X, one of the nicest things which everyone ignored
#
tantek
are there any AS1/JSON consuming applications that do something "interesting" (e.g. presentationally) with "like" activities?
#
oshepherd
Pump.io & clients use it to say "N people liked this"? :P
#
tantek
can they do link rel alternate discovery for application/json ?
#
melvster
tantek: what do you think about standardizing webmention?
#
melvster
a few people were calling for that
#
melvster
i think webmention + activity streams could be 2 quite good deliverables
KevinMarks joined the channel
#
tantek
melvster - it's proven to be a good building block for sure
#
tantek
I would want consideration of its similar vulnerabilities to pingback
#
tantek
and in that way, I'd like at least some review of the current indiewebcamp.com/vouch approach -
#
deiu
tantek, like spam?
#
tantek
precisely
#
deiu
it's a tough one
#
tantek
because for example, pessimistically thinking, if vouch doesn't work, then webmention may be doomed to suffer the same fate as pingback
#
tantek
and I don't know how valuable it is to give the appearance of progress if all we do is recreate the problems of pingback
#
tantek
anyway - I wanted to give full disclosure of my concerns
#
tantek
we have some vouch implementations - however I'm interested in the opinions of a broader group about it
#
deiu
I think we should all try to implement it, get some apps running in interop mode, then see how we can make it better
#
deiu
there's no pressure at this stage in the WG
#
deiu
should really get some sleep...
#
tantek
should too
KevinMarks joined the channel