#social 2017-06-07

2017-06-07 UTC
#
ajordan
at least, that's the position of the Social Working Group and I would guess many in the SocialCG
#
astronouth7303
ajordan: yeah. if it's a position is also held by the majority of implementations, then cool
#
wilkie
link rel discovery is just a normal web thing
#
astronouth7303
wilkie: i'm aware it is, but it should probably be written down, if only so implementers know what rel to be looking for.
#
wilkie
discovery isn't part of the spec
#
wilkie
so, an extension I guess
#
astronouth7303
it needs to be a spec, so servers know what to expose and clients know what to look for
#
astronouth7303
ie, interoperability
#
ajordan
astronouth7303: right. I don't think anyone here knows offhand what all implementors think ;)
#
wilkie
this is what the socialcg is for
#
ajordan
wilkie: discovery _does_ seem pretty core... too late to incubate tho
#
wilkie
discovery isn't part of the client-to-server or server-to-server protocols. it... comes before that. heh
#
ajordan
you could do it as just a client thing but then you'd have a problem where your "preferred" id wouldn't work in all clients
#
ajordan
anyway I gotta go afk; back in ~20 minutes
#
wilkie
it was classically bad to include discovery because then its really inflexible
#
astronouth7303
well, either discovery needs to be published by us, or it's going to be published by 10 blogs with conflicting advice
#
wilkie
this... is what the socialcg is for
#
astronouth7303
then maybe discovery and the status of webfinger should be discussed at a socialcg meeting
#
astronouth7303
like, say, tomorrow
#
astronouth7303
... i'm not actually sure i can?
#
astronouth7303
i can't even access https://www.w3.org/Member/
#
astronouth7303
i'll have to try again later
#
ben_thatmustbeme
astronouth7303: that page you shouldn't be able to access, I don't have access
#
ben_thatmustbeme
That's for w3c members, not invited experts or community group members.
#
ben_thatmustbeme
Unless you are at a w3c member org
#
ben_thatmustbeme
A lot of reading to catch up on there
#
ben_thatmustbeme
I will mention that all of the indieweb uses URLs only without any need for webfinger. But taking to some devs if diaspora, they use only acct://user@host.tld. And have no intention of ever changing. Basically saying it's on everyone else to fit their URLs into some form of that. Me@host or some other magic word
#
ajordan
that sucks
#
ajordan
maybe DenSchub has thoughts on that?
#
ajordan
astronouth7303: what ben_thatmustbeme said
#
ajordan
all you should need is a W3C account, in theory you don't need any special permissions to edit the wiki
#
ajordan
s/,/;/
#
ben_thatmustbeme
However, every independent social media project other than diaspora does have mf2 on their profile pages, so I think it should be pretty easy to have it to get profile data from a URL by either conneg or mf2
#
ben_thatmustbeme
Which means ideally only need webfinger when a webfinger address is given, otherwise, do conneg or mf2 parsing for anything else you need
#
astronouth7303
nope, my w3c account isn't working for the wiki :/
#
saranix
I don't think webfinger has to go away. Re: what goes on a business card-- I could see https://trendylabs.example/trendy-thing-we-call-our-people/person as a URL scheme while person@trendylabs.example is their "address". As for user@host "belonging to email" I reject that. Not only does FTP and other protocols use user@host, but scheme://user@host/locator is built into URI syntax. user@host is universal.
#
astronouth7303
saranix: while technically true, if i just gave you "john@example.com" without further explanation, you'd assume it was an email address
#
saranix
Not if you gave me: "Social media: user@example.com"
#
saranix
vs "email: user@host"
#
saranix
vs "ftp: user@host"
#
saranix
people get it
#
saranix
If you told me "irc: user@freenet" that's not even a valid routable address, but it's pretty unambigous that you mean nick@network
#
saranix
fact is it will always be shorter too. No URL could ever be that short.
#
saranix
People hate remembering long things
#
ajordan
astronouth7303: try setting your password to 16 characters, alphanumeric only
#
ajordan
if that doesn't work try 8 characters
#
ajordan
if that doesn't work ask in #sysops
#
ajordan
saranix: there are a lot of technical reasons behind the desire to deprecate Webfinger
#
ajordan
other people (cwebber2? eprodrom? maybe aaronpk?) can speak to these far better than I can, but one I recall off the top of my head is that Webfinger requires the application to "own" the entire (sub)domain because of .well-known
#
ajordan
e.g. example.com/mastodon won't ever work, it _has_ to be mastodon.example.com
#
ajordan
also IIRC Webfinger has a *lot* of complexity that doesn't ever end up being needed or used in practice (but that one I'm less sure about)
#
jaywink
> "well, either discovery needs to be published by us, or it's going to be published by 10 blogs with conflicting advice" ... I would say the same thing about security, which IMHO is even more important than discovery ;)
#
ben_thatmustbeme
So astronouth7303, saranix, if you gave me ftp: user@host, I would think you really weird. You could use user@host as parts of URLs, but it's very uncommon. If you have a non technical person user@host, they would assume email. If I have that to my mother or brother in law who came even get my email address correct, they would definitely assume email, even if you prefix it with 'social media'
#
ben_thatmustbeme
Webfinger is definitely over complex, lots of redirection, no way for multiple software to do it, but if you use user@host, there has to be some global host... thing
#
ben_thatmustbeme
So my suggestion is this,. The CG should definitely come up with some way to specify how to be compatible with webfinger for AP. Basically, define the upgrade path for webfinger to URL.
#
ben_thatmustbeme
And, assuming the WG gets extended, the WG try to figure out something new
#
jaywink
I feel horrible every time I give my diasproa handle to someone which is user@host format. And jsut to be sure I have mapped it to receive emails since I own my node. URL's much better here for sure, though less nicer to give out unless you own your node and you have a chance to make it simple and not like https://yeah.awesomenode.domain.tld/user/profile/212131311/
#
ben_thatmustbeme
Makes a strong case for software to keep user URLs short
#
ben_thatmustbeme
But even then, it's not going to be great
#
ben_thatmustbeme
The other option is some alternative. Use @@, or some other character. So long as it's designed in a good way.
#
ben_thatmustbeme
User@@domain.tld, @@domain.tld, User@@domain.tld/folder
#
ben_thatmustbeme
Not as pretty, but would work
#
ben_thatmustbeme
Google tried to change it to +username. Might be worth investigating that
bblfish, jankusanagi_ and saranix joined the channel
#
saranix
The single authentication realm per host has always bothered me about webfinger. But in practice, no one actually uses that really narrow
#
saranix
... use-case (i.e. somesite.example/wiki has different users than
#
saranix
... somesite.example/blog)... in practice, they will just
#
saranix
... wiki.somesite.example or blog.somesite.example and be done with it.
#
saranix
... Not only that, but most software that gets installed (regardless of
#
saranix
... webfinger), expects to own the whole hostname anyway. So even though
#
saranix
... it bothers me, in practicality it is meaningless. If you did want to
#
saranix
... solve that though, you could do it with realms [realm]user@host or
#
saranix
... something like that
#
saranix
The tradeoff is again with shortness and simpleness being sacrificed for a use-case that doesn't even exist in practice
#
saranix
It also does NOT have to be an either-or situation... discovery directly by URL should ALSO be supported via proper Link headers/elements
#
puckipedia
Matrix uses @user:domain
#
saranix
I take very serious issue with @user. "At user" makes no damn sense. The only reason it ever came into being was marketing ploy by twitter to reprogram people's brains into thinking that everything is "at twitter". Sadly, it worked very well and people are extremely stupid about using it everywhere now.
#
ben_thatmustbeme
saranix: the problem with just saying that no one uses that really narrow use-case is somewhat self fulfilling, no one does, because they can't
#
saranix
I said regardless of webfinger.
#
saranix
No one uses it as just plain software installs.
#
ben_thatmustbeme
i'm thinking for students to run something in their own webspace at school, its impossible as the university doesn't have a webfinger setup for them
#
saranix
They just don't
#
aaronpk
that's just not true at all
#
aaronpk
the number of questions of "how can I install X in a subdirectory" is a good demonstration of how many people want to do that
#
saranix
So add realms
#
saranix
I gave you the solution
#
saranix
As for control of .well-known, it requires a mediator. That is no different than a DNS server handing out encryption certs for various SMTP servers...
#
saranix
... other than it is on the same HTTPS port, BUT...
#
saranix
... if you have somesite.example/blog and somesite.example/wiki as 2 seperate applications both being hosted on the same HTTPS port, then you've already broken that
#
saranix
... so having a 3rd "authentication app" sitting at .well-known/ which handles registering users for realms, is no different
#
cwebber2
hello #social
#
aaronpk
good morning cwebber2
#
cwebber2
meeting this morning in about 25mins eh?
#
saranix
for the student usecase, @university.edu is authoritative. They must control university.edu/.well-known as a matter of course anyway. When they hand out user@university.edu, and tell them their webspace is university.edu/~user, presumable they are also registering the appropriate info at university.edu/.well-known/webfinger
bblfish and MMN-work joined the channel
#
nightpool
the email confusion is why I said we should use @user@domain, not just user@domain. If you give someone @user@domain, it's very clearly
#
nightpool
A) a social media address
#
nightpool
B) associated with a specific provider, and athoritative in the same way that email is.
#
cwebber2
the two eternal bikesheds of this group
#
cwebber2
wait three
#
cwebber2
1) webfinger is great / no it isn't
#
cwebber2
2) json-ld is great / no it isn't
#
cwebber2
3) signatures are great / no they aren't
#
saranix
I never said it was great, I just said there is no reason it "MUST BE KILLED" as some people are declaring
#
MMN-work
thinks anything with json can just go crawl in under some stone somewhere
#
cwebber2
saranix: I have a pretty similar stance
#
cwebber2
at any rate
#
cwebber2
I don't think it's realistic to expect webfinger to go away son
#
MMN-work
json-ld is amazingly silly because it's just some parts of XML features in a less well-defined package
#
MMN-work
rants
#
saranix
MMN-work: I'll agree to that one. Personally I use an XSLT to translate from native XML to json-ld when needed :-P
#
cwebber2
MMN-work: hey, json-ld can transform to RDF though ;)
#
ben_thatmustbeme
cwebber, i feel like there are definitely more eternal bike sheds in the group than that :P
#
cwebber2
oh I forgot rdf is great / no it isn't
#
cwebber2
(note there's rdf-xml but unlike json-ld, you can't really use normal xml tooling on rdf-xml... it's "just a serialization" as I learned the hard way repeatedly while working at CC)
#
aaronpk
we really should start using mumble for the WG calls, it's way better than the conference line
#
cwebber2
aaronpk: :)
#
saranix
Yeah, don't forget "what does private mean", "retractions are great/ no they aren't", and the related "immutability is great / no it isn't"... I'm sure there's tons if we sat around and bikeshedded about it :-P
#
cwebber2
eternal bikeshed on a spotless mind
#
aaronpk
cwebber2++
#
Loqi
cwebber2 has 87 karma
geppy joined the channel
#
saranix
oh and "what is an inbox"
#
cwebber2
"does email get to claim the term inbox and nobody else can use it now"
#
saranix
well apparently they get to claim all user@host semantic addressing
#
MMN-work
present+
#
MMN-work
or how is it?
#
nightpool
MMN-work: we have to start the meeting first
#
ben_thatmustbeme
cwebber2 trackbot, start meeting
#
aaronpk
trackbot, start meeting
RRSAgent joined the channel
#
trackbot
is preparing a teleconference.
#
trackbot
RRSAgent, make logs public
Zakim joined the channel
#
RRSAgent
I have made the request, trackbot
#
trackbot
Zakim, this will be SOCL
#
Zakim
ok, trackbot
#
trackbot
Meeting: Social Web Working Group Teleconference
#
trackbot
Date: 07 June 2017
#
MMN-work
nightpool: I'm too eager!!!
#
geppy
present+
#
Loqi
geppy: ajordan left you a message 6 days, 22 hours ago: I'm in love with octobox.io. thanks again omg
#
MMN-work
present+
#
cwebber2
present+
#
aaronpk
present+
#
nightpool
present+
#
ajordan
tried to say something and ended up coughing a bunch ;)
#
ajordan
present+
#
aaronpk
hm we need to figure out how to tell trackbot this is the CG meeting not the WG meeting
#
jaywink
present+
#
geppy
:)
#
geppy
volunteer for what?
#
aaronpk
scribing
#
ben_thatmustbeme
Meeting: Social Web Incubator Community Group Teleconference
#
ben_thatmustbeme
cannot scribe today
#
geppy
if not, I can scribe (and just type whatever's said in Mumble?)
#
saranix
present+
#
ben_thatmustbeme
i wrote something up on the wiki cwebber2
#
cwebber2
scribenick: MMN-work
#
MMN-work
cwebber2: First item is social working group update. I wasn't there, maybe aaron is better to represent it
#
ajordan
MMN-work: if someone is continuing to speak prefix with `... `
#
ajordan
ben_thatmustbeme and I were on the call
MMN-work joined the channel
#
MMN-work
present+
#
cwebber2
Expressing intent of "where" a message shows up (direct messages? etc?) See: https://github.com/w3c/activitypub/issues/196#issuecomment-304958984
#
Loqi
[cwebber] Note that Pump.io already does this, and I think this may be the answer: inbox is still used for federation, but multiple streams can be presented to the user in terms of inbox / the "major" feed (which is all the main posts and comments and etc) / t...
#
Zakim
sees ajordan on the speaker queue
#
ben_thatmustbeme
general rule MMN-work, as scribe you are allowed to stop discussion to catch up too
#
nightpool
Mastodon now highlights direct messages, but does not seperate them
#
ajordan
as tantek(?) said yesterday: the only one with the power to stop the chair ;)
#
MMN-work
cwebber2: First discussion is "where" a message shows up, this is regarding who a message is addressed to and where in UIs and feeds to show it (scoping)
#
MMN-work
cwebber2: But it seems everyone seem happy about it, so unless anyone has something to say maybe we can skip it
#
MMN-work
(missed who): what was the resolution?
#
MMN-work
cwebber2: Maybe I'm wrong about there being a resolution, but having a flag may be the best way to do this instead of a type
#
MMN-work
nightpool: Having a separate type would fail fast, so there are benefits to that. What are your thoughts on having separate inboxes?
#
nightpool
to clarify: I meant seperate inboxes to psot to
#
MMN-work
cwebber2: An inbox serves two purposes in ActivityPub, a place where people post TO and where you read FROM.
#
nightpool
s/psot/post
#
ajordan
aaronpk: ?
#
saranix
I thought we were pretty solid on calling it a "disposition"?
#
MMN-work
cwebber2: One option here on "where" is like a "follow" that maybe shouldn't show up in all feeds. [I missed the other option]
#
Zakim
sees ajordan on the speaker queue
#
cwebber2
ack ajordan
#
Zakim
sees no one on the speaker queue
#
nightpool
It appears I'm totally misremembering this.
#
saranix
"post" vs "mail", or "deliver" vs "notify"
#
geppy
nightpool: you mean using a fragment specifier to express an intent to address a subinbox? as in geppy.im/me#special-inbox ?
#
nightpool
Right
#
nightpool
I thought people had suggested that in the issue
#
nightpool
but can't find it now
#
MMN-work
cwebber2: I'm having a little hard time keeping up. I'll keep trying for a while and focus more but we'll see how it goes. .)
#
MMN-work
cwebber: How about having separate types or different filtered inboxes?
#
nightpool
I'm +1 on that
#
MMN-work
How about a poll, not a resolution, regarding types/flags vs. inboxes?
#
MMN-work
cwebber: How about a poll, not a resolution, regarding types/flags vs. inboxes?
#
saranix
I don't think that's right. The receiver organizes their boxes, that makes it sound like the sender is organizing for them
#
MMN-work
needs to train his fingers and short term memory
#
astronouth7303
present+
#
geppy
MMN-work: let me know if you'd like me to try
#
MMN-work
cwebber: The receiver would still filter and inboxes would only be informative
#
cwebber2
saranix, ^^^
#
geppy
+0
#
cwebber2
the properties would be informative to how the server can filter into the sub-inbox read endpoints
#
jaywink
> The receiver organizes their boxes, that makes it sound like the sender is organizing for them <--- agree
#
saranix
still causing cognitive dissonance.
#
cwebber2
saranix, are you -0 then?
#
saranix
-1
#
saranix
for inboxes
#
saranix
I think flag is the way to go
#
geppy
I feel like an informative flag is ideal (re: receiver or their useragent organizes their own inboxes), rather than a type that's more "you must do this".
#
nightpool
Uh we're talking about flags
#
cwebber2
saranix: this *is* going to be a flag
#
geppy
+1
#
aaronpk
saranix, are you able to join the mumble call?
#
saranix
aaronpk: no
#
MMN-work
cwebber: There is confusion on IRC. It would be a flag.
#
cwebber2
saranix: it's, the server posts a message like {"@type": "Note", "directMessage": true}
#
nightpool
Sorry, this informal proposal is "we either use flags or note types, and *don't* use different inboxes to post to"
#
cwebber2
saranix: to the *normal inbox
#
nightpool
"but the server that a client is reading from may provide seperate inboxes to read from"
#
saranix
this is not clear at on all IRC
#
cwebber2
saranix: and then the server could decide to have another endpoint that's read *from*, but it's at server's discretion to filter there
#
saranix
what is the actual poll question
#
MMN-work
apologises to saranix
#
cwebber2
saranix: how you are with that solution I just described
#
cwebber2
to reiterate:
#
MMN-work
ajordan: Aren't we talking about the proposal on GitHub [some days] ago?
#
MMN-work
cwebber: yes, basically
#
Loqi
[annando] #196 How to differentiate between posts and private (direct) messages?
#
cwebber2
poll question is, how are people with either having a flag like described in https://github.com/w3c/activitypub/issues/196#issuecomment-304958984 <- this comment
#
Loqi
[cwebber] Note that Pump.io already does this, and I think this may be the answer: inbox is still used for federation, but multiple streams can be presented to the user in terms of inbox / the "major" feed (which is all the main posts and comments and etc) / t...
#
cwebber2
and having the server filter into sub-inbox endpoints, at its discretion, for *reading* (but not for other servers to post to it, they would still post to the same endpoint)
#
Zakim
sees ajordan on the speaker queue
#
cwebber2
saranix: I think that matches your flag and the server deciding to post to their boxes thing?
#
astronouth7303
+1 flag (in particular, a general `disposition` flag)
#
saranix
yes
#
saranix
+0
#
cwebber2
saranix: \o/ :)
#
saranix
I prefer 'disposition':enum to 'directMessage':bool
#
geppy
is also still waking up
#
wilkie
always enums, never bools
#
MMN-work
ajordan: We are going to figure out how to have clients figure out where to read from
#
MMN-work
ajordan: Maybe we could have clients create types of inboxes
#
wilkie
extensions are going to create inboxes to post to, for instance for private messages
#
nightpool
+1 from me on either using note types or flags
#
MMN-work
cwebber: we're most certainly going to keep supporting sub-inboxes as pump.io does that
#
MMN-work
cwebber: pump.io doesn't have flags though
#
MMN-work
cwebber: saranix changed to +0 so we have consensus
#
Loqi
[brianolson] #225 Needs provisions for encrypting content for privacy
#
MMN-work
cwebber: Next up is end to end encryption, I'll link it on IRC
tantek joined the channel
#
MMN-work
cwebber: e2e encryption has come up multiple times. We talked about this in the working group two weeks before. We were happy about the idea
#
geppy
I'll comment on the GitHub issue that there's an informal SocialCG/SWICG consensus supporting expressing intent to target a subinbox via a flag.
#
MMN-work
cwebber: e2e encryption means server can't mutate or change messages
#
jaywink
shouldn't it mean "read at all"?
#
MMN-work
cwebber: If you don't need side effects you can do like openpgp email (throwing aside ui issues)
#
MMN-work
cwebber: If you're sending email OpenPGP encrypted, I send an email to you the server will happily pass it along without knowing content
#
MMN-work
cwebber: I think majority of what you want encrypted is content, this can be done with wrapper object that has "encrypted post type" with base64 encrypted message
#
MMN-work
cwebber: and the user on the receiving end could decrypt and they'd be able to display in the client, which would be a json-ld object
#
Zakim
sees ajordan on the speaker queue
#
tantek
good morning #social
#
Loqi
tantek: ajordan left you a message 20 hours, 20 minutes ago: you forgot to answer saranix's question about why W3C switched to GitHub issues, and from what
#
tantek
tries to catch up on logs. busy day already!
#
cwebber2
ack ajordan
#
Zakim
sees no one on the speaker queue
#
MMN-work
cwebber: Main challenge would be attaching keys to things. But as this has come up multiple times and I wanted to discuss in the group
#
Zakim
sees ajordan on the speaker queue
#
MMN-work
cwebber: One place where this makes it challenging is that web apps/browsers with the existing infrastructure. Easier on mobile apps etc.
#
MMN-work
cwebber: Basically javascript crypto at the moment is pretty bad.
#
cwebber2
ack ajordan
#
Zakim
sees no one on the speaker queue
#
MMN-work
ajordan: To clarify: do you think e2e crypto is difficult in web browsers is difficult or wrapping json-ld?
#
tantek
wonders if he called into the right mumble
#
MMN-work
cwebber: The whole field is difficult
#
MMN-work
cwebber: *dragging tantek in using administrative privileges*
#
MMN-work
cwebber: Do people think e2e enc, despite caveats, it's a reasonable solution? Does it have problems?
#
MMN-work
q+ to talk about complexity regarding keys
#
Zakim
sees MMN-work on the speaker queue
#
Zakim
sees MMN-work on the speaker queue
#
cwebber2
ack MMN-work
#
Zakim
MMN-work, you wanted to talk about complexity regarding keys
#
Zakim
sees no one on the speaker queue
#
cwebber2
scribenick: cwebber2
#
Zakim
sees ajordan on the speaker queue
#
cwebber2
MMN-work: I think the complexity of crypto is hard of course, but the main problem is keeping up to date etc, for example openpgp has a terrible ui but having a nice UI won't solve things. eg, what happens if you lose your computer? if you don't have a backup key, do you lose your entire data? this problems are what happen with encryption. this is more okay with otr, because people don't really check fingerprints
#
cwebber2
scribenick: MMN-work
#
cwebber2
ack ajordan
#
Zakim
sees no one on the speaker queue
#
tantek
q+ to say gotta do better than email, since even nerds I know can't be bothered with all the ceremony and admin crap to make / keep e2e "work" in the federated system of email
#
Zakim
sees tantek on the speaker queue
#
nightpool
q+ to talk about federation
#
Zakim
sees tantek, nightpool on the speaker queue
#
MMN-work
ajordan: So given there are a lot of userworld problems here. Losing your device, things that don't work. How do you follow someone in e2e enc etc?
#
geppy
q+ to comment on being unqualified to weigh in, and so leaning towards leaving it to extensions
#
Zakim
sees tantek, nightpool, geppy on the speaker queue
#
tantek
ajordan++ self-hosting as the path forward for privacy
#
Loqi
ajordan has 8 karma
#
Zakim
sees tantek, nightpool, geppy on the speaker queue
#
cwebber2
ack tantek
#
Zakim
tantek, you wanted to say gotta do better than email, since even nerds I know can't be bothered with all the ceremony and admin crap to make / keep e2e "work" in the federated
#
MMN-work
ajordan: Something that's been mentioned in WG or maybe on IRC. Issues here are too complex,
#
Zakim
... system of email
#
Zakim
sees nightpool, geppy on the speaker queue
#
astronouth7303
q+
#
Zakim
sees nightpool, geppy, astronouth on the speaker queue
#
geppy
wilkie: are you "present+"
#
wilkie
present+
#
MMN-work
tantek: the only point I wanted to make is that I think it's super hard and has a massive failure example in the only federated system that people tried this in (which is email) where not even nerdy nerds don't bother with all the crap to make it work
#
ajordan
is enjoying tantek trying to figure out Mumble
#
ajordan
tantek++
#
Loqi
tantek has 59 karma in this channel (347 overall)
#
nightpool
tantek: one thing to note is that riot/matrix is attempting to tackle this problem
#
Zakim
sees nightpool, geppy, astronouth, cwebber on the speaker queue
#
MMN-work
tantek: I don't have particularly high hopes for any other group to solve it, especially in a more complex environment like the social web
#
Zakim
sees nightpool, geppy, astronouth, cwebber, aaronpk on the speaker queue
#
cwebber2
ack nightpool
#
Zakim
nightpool, you wanted to talk about federation
#
Zakim
sees geppy, astronouth, cwebber, aaronpk on the speaker queue
#
MMN-work
tantek: It's a hard problem but I am unsure how much more time we should spend on this. I _want_ e2e encryption but wishes don't make it so. Solve it for the simpler case email first, then solve it for this more complex scenario
#
MMN-work
nightpool: What we've seen is people organise into their own social groups that have their own trust.
#
MMN-work
nightpool: People organise into small groups so privacy is essentially assured ("I know my admin")
#
saranix
I think email is more of a problem because of the keyservers question. We don't exactly have that problem because we are bootstrapping from social "connections" where this information can be exchanged (plus webfinger, etc.)
#
tantek
FWIW the UX oddities of Mumble are more than worth the extremely clear audio. It's so much nicer, almost has a calming effect compared to any other telcon service. People sound actually human.
#
cwebber2
ack geppy
#
Zakim
geppy, you wanted to comment on being unqualified to weigh in, and so leaning towards leaving it to extensions
#
Zakim
sees astronouth, cwebber, aaronpk on the speaker queue
#
MMN-work
nightpool: We are not necessarily the people here who are qualified to comment on proposed e2e encryption scheme
#
wilkie
this is where extensions should be done
#
MMN-work
geppy: I suggest making it possible for this to be an extension
#
ajordan
would be somewhat qualified but
#
cwebber2
ack astronouth7303
#
Zakim
sees astronouth, cwebber, aaronpk on the speaker queue
#
astronouth7303
+0 on e2e: I recognize that it is a highly-wanted feature, i'm not sold it can be done in ActivityPub while maintaining desired privacy and without breaking ActivityPub.
#
MMN-work
cwebber: This was not suggested to be put into the spec but rather as an extension
#
cwebber2
ack astronouth
#
Zakim
sees cwebber, aaronpk on the speaker queue
#
wilkie
I think an outline for what an extension's goals are is appropriate thing for this group to do... even if we don't have the implementation expertise
#
astronouth7303
cwebber2: ^^
#
MMN-work
astronouth7303: "+0 on e2e: I recognize that it is a highly-wanted feature, i'm not sold it can be done in ActivityPub while maintaining desired privacy and without breaking ActivityPub"
#
MMN-work
:P
#
Zakim
sees cwebber, aaronpk on the speaker queue
#
cwebber2
ack cwebber
#
Zakim
sees aaronpk on the speaker queue
#
geppy
q+ to clarify "an extension [to be designed later by experts]" versus "an extension [like this]"
#
Zakim
sees aaronpk, geppy on the speaker queue
#
MMN-work
cwebber: There are two things I want to say. First, this is a hard thing to do correctly. I'm sure we all know this comes up all the time - people want e2e encryption so I wanted to discuss it
#
Zakim
sees aaronpk, geppy, ajordan on the speaker queue
#
tantek
no no, neither Signal nor Telegram are federated
#
tantek
incomparable to email sorry
#
aaronpk
that's what i was going to say :)
#
MMN-work
cwebber: Signal and Telegram seem to be doing much better than email with e2e encryption. Maybe explicitly designed systems it could be done better, but it would have to be tried. But I share skepticism of many people in this group.
#
tantek
I mean, iMessage does great e2e encryption :P
#
ajordan
tantek: cwebber2's point is that the UX is better
#
ajordan
definitely valid criticism tho
#
tantek
UX for federated e2e is MUCH harder than silo e2e
#
ajordan
tantek++
#
tantek
silo e2e can conflate all key management issues etc. and make that transparent to users
#
cwebber2
ack aaronpk
#
Zakim
sees geppy, ajordan on the speaker queue
#
MMN-work
cwebber: If people are very interested in trying it. Having a wrapper with encryption type as property would solve better than gobbledigook as in OTR on XMPP etc.
#
jaywink
TBH, AP should have clear definition of what is security before the ultimate security feature (=e2e) is even discussed :)
#
astronouth7303
jaywink++
#
Loqi
jaywink has 3 karma
#
tantek
it's good to set the UX bar as high as iMessage/Signal/Telegram, HOWEVER, it doesn't mean those are proofs of concept of how to do federated UX
#
geppy
^^
#
MMN-work
aaronpk: Signal and Telegram solve this by not being federated because they handle key management. So we can't say "let's do that"
#
geppy
jaywink++
#
Loqi
jaywink has 4 karma
#
MMN-work
aaronpk: iMessage is coordinating the keys, so when you get new device they distribute the keys etc. So you're fetching the keys from centralised service. It works but it's not federated.
#
nightpool
aaronpk++
#
Loqi
aaronpk has 88 karma in this channel (1341 overall)
#
Zakim
sees geppy, ajordan on the speaker queue
#
nightpool
key management is definitely the right frame here
#
tantek
aaronpk++ the key challenge is key management
#
Loqi
aaronpk has 89 karma in this channel (1342 overall)
#
MMN-work
aaronpk: We should handle it as a key management problem, not an encryption problem.
#
tantek
so to speak ;)
#
nightpool
q+ to scope
#
Zakim
sees geppy, ajordan, nightpool on the speaker queue
#
ajordan
aaronpk++
#
Loqi
aaronpk has 90 karma in this channel (1343 overall)
#
cwebber2
ack geppy
#
Zakim
geppy, you wanted to clarify "an extension [to be designed later by experts]" versus "an extension [like this]"
#
Zakim
sees ajordan, nightpool on the speaker queue
#
cwebber2
ack ajordan
#
Zakim
sees nightpool on the speaker queue
#
MMN-work
geppy: I don't feel qualified to weigh in on any aspect, extension or not.
#
tantek
sees if he can answer saranix's question in the middle of all this
#
MMN-work
ajordan: Since we're talking about OTR, Signal etc, an example of federated encryption system that works is OMEMO
#
tantek
interesting
#
geppy
will have to look into OMEMO more
#
MMN-work
ajordan: I recommend looking into OMEMO for design choices such as "each device has a key" instead of each user which makes it easier to use.
#
wilkie
Matrix has federated e2e
#
Zakim
sees nightpool on the speaker queue
#
cwebber2
good point wilkie
#
MMN-work
ajordan: Another thing that makes it work is the fact that XMPP has publish/subscribe which makes it easy to update and basically coordinate device lists so you can easily see which clients the user has
#
nightpool
yeah I mentioned that a bit back but it got lost in the scrollback I think. it also has this per-client key thing
#
MMN-work
ajordan: And based on this, it's possible to activate OMEMO encryption
#
Loqi
Welcome to Matrix An open network for secure, decentralized communication. Learn More ...
#
wilkie
Matrix developed this Olm library, which might be of some inspiration: https://github.com/matrix-org/olm
#
Loqi
[matrix-org] olm: An implementation of the Double Ratchet cryptographic ratchet in C++/C
#
MMN-work
q+ to OMEMO history etc.
#
Zakim
sees nightpool, MMN-work on the speaker queue
#
MMN-work
ajordan: There are still issues that clients won't say "I don't support this" and ActivityPub maybe doesn't have this signalling and primitives for devices.
#
Zakim
sees nightpool, MMN-work on the speaker queue
#
cwebber2
ack nightpool
#
Zakim
nightpool, you wanted to scope
#
Zakim
sees MMN-work on the speaker queue
#
MMN-work
cwebber: Matrix has end to end encryption
#
MMN-work
I'm going ayway for a moment
#
cwebber2
(that last scribe of me was relaying what wilkie said
#
MMN-work
get geppy
#
ajordan
s/activate OMEMO encryption/activate OMEMO encryption automatically/
#
geppy
scribenick geppy
#
geppy
scribenick: geppy
#
tantek
!tell saranix before github issues, w3c issues were kept in a variety of disparate systems, some with very poor UX (which meant people didn't use them much in practice, or only a small subset with lots of time to spend used them, another form of indirect exclusion). disparate systems like W3C bugzilla, W3C "tracker", w3c wiki pages, documents in w3c CVS, etc. Individual WGs started switching to github because it was far more accessible/usable (thus inclus[CUT]
#
Loqi
Ok, I'll tell them that when I see them next
#
tantek
more people than *any* of those disparate systems.
#
cwebber2
ack MMN-work
#
Zakim
MMN-work, you wanted to OMEMO history etc.
#
Zakim
sees no one on the speaker queue
#
geppy
MMN-work is stepping away for a moment
#
nightpool
my stuff didn't get scribed
#
geppy
cwebber: do we want to say we've said all we have to say? we've had a useful conversation pointing out relevant prior art
#
tantek
let's capture OMEMO and Matrix as examples to read & review before continuing discussion
#
geppy
sorry, nightpool
#
nightpool
I'll re-do it here
#
Zakim
sees no one on the speaker queue
#
tantek
what's the issue # / URL for tracking this?
#
nightpool
We should make sure to narrow our scope: if we want to implement e2e as an extension, we should focus first on the scope of direct messages, with 1 user talking to 1 other user
#
nightpool
basically chats
#
geppy
ajordan: if anyone disagrees, feel free to speak up. but it seems the general consensus is that this is an extremely complex issue that we may not be able to solve *at all*. We may have more basic issues we need to resolve, e.g. direct messages
#
wilkie
doesn't matter how complex it is, somebody is going to do it... it is going to be important to outline the goals of it and why it is hard?
#
geppy
cwebber2: proposal: E2E is interesting and worth exploring in the future, but not the primary focus of *this* group.
#
aaronpk
we don't seem to have an issue for this on https://github.com/swicg/general/issues
#
nightpool
cwebber2: I would make an even stronger proposal
#
nightpool
in that this group does not have the resources or expertise to qualify an e2e system.
#
geppy
aaronpk: I'd suggest that we should review the prior art of OMEMO and Matrix before talking about this again.
#
astronouth7303
+1 out of scope for the main SocialCG (the "play in the corner" solution)
#
wilkie
yes, what cwebber2 is saying
#
geppy
cwebber2: It may be useful to talk about this in order to lay the groundwork. Maybe write up a report about issues we've identified. Cochairs?
#
saranix
+1 revisit after everyone has read the material
#
Loqi
saranix: tantek left you a message 4 minutes ago: before github issues, w3c issues were kept in a variety of disparate systems, some with very poor UX (which meant people didn't use them much in practice, or only a small subset with lots of time to spend used them, another form of indirect exclusion). disparate systems like W3C bugzilla, W3C "tracker", w3c wiki pages, documents in w3c CVS, etc. Individual WGs started switching to github because it was far more accessible/usable (thus inclus[CUT]
#
ben_thatmustbeme
points to the word "incubator" in the group name ;P
#
Zakim
sees no one on the speaker queue
#
ben_thatmustbeme
in other words, go off an experiment
#
geppy
I'd be willing to look into this and write up some unofficial notes for my own domain
#
geppy
MMN-work++ for scribing earlier
#
Loqi
mmn-work has 2 karma
#
cwebber2
informal proposal: e2e is important but we don't have the expertise / experience to do it right now, we're interested in hearing more research about it, but we don't have the bandwidth to make it take up our primary work right now
#
geppy
+1
#
MMN-work
+1
#
astronouth7303
+1
#
nightpool
+1
#
Loqi
[brianolson] #225 Needs provisions for encrypting content for privacy
#
geppy
cwebber2: I haven't seen so many +1s at once in a while! Informally resolved.
#
wilkie
I need the next item on the agenda... where do we write these notes heh because I can write something up
#
cwebber2
not so many +1s so fast anyway :)
#
cwebber2
topic: Authenticated/private WebSub subscriptions
#
ajordan
+1 (to cwebber2's proposal)
#
saranix
+1
#
cwebber2
scribenick: cwebber2
#
tantek
still catching up on logs
#
cwebber2
aaronpk: github supposedly implemented websub, but it turns out not exactly, since they require authenticating via an api key, which breaks compatibility but for a reason presumably they need. wondering if anyone has heard of other groups doing this or are interested in exploring it
#
Zakim
sees no one on the speaker queue
#
tantek
!tell saranix re: @user - did not happen because of Twitter marketing, rather people were already using @-name references on Twitter *before* Twitter acknowledged it, linked them, and made them official. @-name refs predate twitter on various other bbs or silos (e.g. have seen on Flickr too)
#
Loqi
Ok, I'll tell them that when I see them next
#
cwebber2
aaronpk: I also know that mastodon has done interesting things with PuSH / websub to do private feeds, wonder if there are things we can learn from them
geppy1 joined the channel
#
geppy1
got disconnected
#
geppy1
nightpool: mastodon seems to hook WebSub into Salmon somehow, requiring approval for follow requests
#
cwebber2
nightpool: yes, mastodon hooks up pubsubhubbub with salmon in a way I'm not familiar with, where person following needs to approve it
#
cwebber2
scribenick: geppy1
#
Zakim
sees no one on the speaker queue
#
puckipedia
cwebber2: I think what Mastodon does is they check the hostname of the websub target url, and if noone on that host is following that person, that subscription only gets public posts
#
ajordan
agenda+ this CG is skewed towards ActivityPub people
#
Zakim
notes agendum 1 added
#
geppy1
(aaronpk? ajordan?): I think unlike e2e this is something we can actually make progress on
#
aaronpk
s/(aaronpk? ajordan?)/aaronpk/
#
cwebber2
ajordan: the agenda is skewed that way but doesn't have to be
#
MMN-work
geppy++
#
Loqi
geppy has 1 karma
#
geppy1
nightpool: That's how they distribute private messages, but it's also how they handle follow requests if your account is "locked".
#
cwebber2
ajordan: anyone can add topics, and should
#
ajordan
cwebber2: that's what I'm saying
#
Zakim
sees no one on the speaker queue
#
geppy1
I think this is really interesting, but I'll have to go back and see what I missed
#
tantek
+1 to ajordan's point
#
ajordan
most people here are interested in AP, I'd like to bring more IndieWeb people in here
#
geppy
cwebber2: We have two agenda items left, do we want to do that?
#
nightpool
Sorry, I used to know how the system works but it's been a few months since I touched that part of the code
#
cwebber2
PROPOSAL: extend the group for 15 minutes
#
geppy
+1
#
nightpool
+1
#
MMN-work
+1
#
tantek
+1 can actually make it today because #css is pushed to 16:00 PDT!
#
astronouth7303
+1
#
geppy
:)
#
geppy
(proposal succeeds)
#
geppy
cwebber2: next topic is where extension proposals should go (ActivityPub organization, SWICG repo, ...)
#
geppy
cwebber2: long term I'm not sure putting it on /activitypub makes sense, especially once it goes to CR. Can someone with more W3C experience weigh in?
#
Zakim
sees no one on the speaker queue
#
geppy
cwebber2: do tantek or aaronpk have any thoughts on this?
#
geppy
q+ to mention rel=""
#
Zakim
sees geppy on the speaker queue
#
geppy
there is an "i'm thinking" emoji, don't know about emoticons
#
nightpool
?
#
geppy
yes, tantek
#
ben_thatmustbeme
wouldn't put it past tantek knowing unicode description fields by heart
#
geppy
tantek: extensions are a weird thing in the W3C space in that I don't know of a consistent pattern, despite being involved in W3C for years.
#
ben_thatmustbeme
suspects tantek is turing complete
#
ajordan
ben_thatmustbeme yeah :D
#
geppy
tantek: I think if we come up with something that sounds reasonable it's likely to be okay
#
Zakim
sees geppy, ajordan on the speaker queue
#
nightpool
q+
#
Zakim
sees geppy, ajordan, nightpool on the speaker queue
#
nightpool
Has anyone recently been able to sign up for a wiki account?
#
Zakim
sees geppy, ajordan, nightpool on the speaker queue
#
Zakim
sees geppy, ajordan, nightpool, tantek on the speaker queue
#
cwebber2
ack geppy
#
Zakim
geppy, you wanted to mention rel=""
#
Zakim
sees ajordan, nightpool, tantek on the speaker queue
#
MMN-work
scribenick: MMN-work
#
MMN-work
geppy: [silence]
#
Loqi
[ajordan] astronouth7303: try setting your password to 16 characters, alphanumeric only
#
ajordan
(and following messages)
#
cwebber2
geppy, we assume you are typing :)
#
MMN-work
geppy left the server
#
Zakim
sees ajordan, nightpool, tantek, geppy on the speaker queue
#
MMN-work
ajordan: I have a concrete proposal.
#
cwebber2
geppy, keep typing, I will relay you when you're done... oh, or maybe you dropped out
#
cwebber2
ack ajordan
#
Zakim
sees nightpool, tantek, geppy on the speaker queue
#
ben_thatmustbeme
can always add them to the end of the queue again
#
MMN-work
ajordan: If we want to write a "spec" we can create another repository under SWICG we can have an issue tracker for that extension specifically
geppy1 joined the channel
#
geppy1
geppy: I'd refer to I think the HTML `link` tag's `rel` property is defined as being extended on microformats.org, as well as if there's a microformat spec (can't remember) I think it also says "go look at the external microformats wiki for extensions". [sorry, got disconnected while saying this earlier]
#
geppy1
Sorry, got disconnected again. :/
#
MMN-work
cwebber: We could record, accept PRs etc, put their drafts into text. That sounds good to me.
#
geppy
*refer*, not *prefer*
#
MMN-work
geppy: I'd prefer to think the HTML `link` tag's `rel` property is defined as being extended on microformats.org, as well as if there's a microformat spec (can't remember) I think it also says "go look at the external microformats wiki for extensions". [sorry, got disconnected while saying this earlier]
#
cwebber2
ack geppy
#
Zakim
sees nightpool, tantek on the speaker queue
#
nightpool
(MMN-work: anything someone says in IRC is automatically recorded as part of the minutes, just FYI)
#
MMN-work
cwebber: I don't think the same workflow applies to us. It is useful to look at what other attached parts of our (web/w3c/social) space
#
cwebber2
ack nightpool
#
Zakim
sees tantek on the speaker queue
#
MMN-work
cwebber: ...are doing
#
MMN-work
nightpool: My proposal is basically the same as ajordan's. The major difference is that we have a organisation namespace so many extensions could live in their own repos. With ActivityPub repo we only have that single repo to work with.
#
ajordan
PROPOSED: Create an activitypub-extensions repo under the SWICG GitHub org in order to discuss AP extensions. Move existing "postponed (revisit in future effort)" discussions there. Create a separate repository if we want to actually write out some spec text for an extension.
#
geppy
+1
#
astronouth7303
+1
#
MMN-work
nightpool: Also we should rename SWICG to SocialCG considering the resolution on the last meeting
#
wilkie
what tantek said!
#
ajordan
nightpool: I was also suggesting that we create an extension per repo
#
MMN-work
+0
#
nightpool
+1
#
saranix
+1
#
Loqi
saranix: tantek left you a message 14 minutes ago: re: @user - did not happen because of Twitter marketing, rather people were already using @-name references on Twitter *before* Twitter acknowledged it, linked them, and made them official. @-name refs predate twitter on various other bbs or silos (e.g. have seen on Flickr too)
#
wilkie
I just wanted to understand if one gets deprecated or removed
#
nightpool
ajordan: I think that some extensions are small enough they can live on the main repo, and some extensions need a full repo
#
MMN-work
tantek: I want to offer an alternative, instead of saying "we should do it this way". People have different preference for markdown/wiki markup, they're equally awkward
#
ajordan
nightpool: that seems reasonable. we can decide per-spec later if we need
#
MMN-work
tantek: with proposals it's something that could go on the wikipage and doesn't have to go on github. The ux on github is better than wiki for issues
#
nightpool
I would be =1 to using wiki pages for extensions. it makes it hard to come to consensus or figuring out what is "official" vs just proposed.
#
MMN-work
tantek: wiki gives us at least _a_ way to participate without having a GitHub account
#
cwebber2
nightpool, =1? :)
#
MMN-work
tantek: we could have a link to the proposal to leave it up to the person letting the one having a proposal have more control on how to develop it
#
nightpool
er, -1
#
nightpool
for wikis
#
nightpool
q+
#
Zakim
sees tantek, nightpool on the speaker queue
#
MMN-work
cwebber: It looks like we have a resolution to create the repo, at least to have a place to capture conversation. Where the extensions are then drafted can be left up to the people doing it.
#
Zakim
sees tantek, nightpool on the speaker queue
#
MMN-work
cwebber: so GitHub is for discussion and not for drafting
#
Zakim
sees nightpool on the speaker queue
#
cwebber2
ack nightpool
#
Zakim
sees no one on the speaker queue
#
tantek
I'd prefer not requiring github for actual extension text
#
tantek
but that's not a strong preference, more like a suggestion for the group
#
MMN-work
someone: that's not what the proposal was
#
Zakim
sees no one on the speaker queue
#
Zakim
sees ajordan on the speaker queue
#
geppy
I'd also prefer not *requiring* GitHub, I particularly like just linking to an external domain with an extension spec.
#
aaronpk
heh that's not a problem unique to a wiki. people often don't realize that W3C notes are different from W3C recs
#
MMN-work
nightpool: wiki is harder to distinguish what's official etc, while on GitHub there is discussion per pull request etc.
#
aaronpk
same with ietf docs
#
Zakim
sees ajordan on the speaker queue
#
cwebber2
ack ajordan
#
Zakim
sees no one on the speaker queue
#
saranix
they are all confusing, but github login barrier is serious issue
#
tantek
in contrast, both microformats and indieweb community have developed specs on wikis successfully for years
#
Zakim
sees no one on the speaker queue
#
tantek
so it is doable
#
MMN-work
ajordan: I wanted to point out that with the wiki it's unclear how to have parallell discussions. With GitHub you can have parallell discussions on pull requests. I can't see how that would look on a wiki
#
nightpool
github.com/rust-lang/rfcs rust RFCs are a good example of work in this space
#
geppy
nightpool++ for mentioning rust-lang/rfcs
#
Loqi
nightpool has 6 karma
#
MMN-work
cwebber: tantek writes on irc that "in contrast, both microformats and indieweb community have developed specs on wikis successfully for years"
#
tantek
+extension :)
#
ajordan
+1 to extending
#
MMN-work
cwebber: We're now at the extended time limit
#
cwebber2
PROPOSED: extend by another 15 mins
#
tantek
since we spent the previous extension talking about extensions
#
tantek
yo dawg
#
geppy
+1
#
nightpool
+1
#
saranix
+1
#
ajordan
tantek++ for "yo dawg" :D
#
cwebber2
RESOLVED: extend by another 15 mins
#
ajordan
tantek++
#
wilkie
I'd say: github for socialcg discussion, but yet extensions choose where language is written
#
ajordan
Loqi: ping
#
MMN-work
cwebber: Does anyone want to suggest something that solves wiki proposals? (scriber: did I get that?)
#
cwebber2
MMN-work, you got it
#
tantek
PROPOSAL: Use https://www.w3.org/wiki/ActivityPub_extensions as the directory for extensions that links to them wherever authors want to write them up (github repo, wiki, personal site), and then use github issues for issue discussions.
#
wilkie
tantek needs to then scan what he is typing on his typewriter from the 70s
#
geppy
+1
#
wilkie
I also have the silent Das and can confirm this
#
ben_thatmustbeme
lol, link to that keyboard?
#
MMN-work
tantek: [CLICK CLICK] this is the silent version of the keyboard model, there's also a louder model.
#
saranix
+1
#
geppy
MMN-work++ for scribing that
#
ajordan
MMN-work++
#
Loqi
mmn-work has 3 karma
#
astronouth7303
+1
#
cwebber2
RESOLVED: Use https://www.w3.org/wiki/ActivityPub_extensions as the directory for extensions that links to them wherever authors want to write them up (github repo, wiki, personal site), and then use github issues for issue discussions.
#
tantek
we are such keyboard nerds
#
tantek
mutes
#
tantek
*wilkie, we are
#
Zakim
sees no one on the speaker queue
#
cwebber2
<ajordan> agenda+ this CG is skewed towards ActivityPub people
#
MMN-work
cwebber: Noone's on the queue, let's move on the next item
#
geppy
doesn't see the other topic on https://www.w3.org/wiki/SocialCG/2017-06-07 , where are you seeing it added?
#
MMN-work
ajordan: Basically I was noticing aaronpk was talking about WebSub and I think the people in this group tend to skew heavily toward people who are interested in ActivityPu
#
tantek
Zakim, agenda?
#
Zakim
sees 1 item remaining on the agenda:
#
Zakim
1. this CG is skewed towards ActivityPub people [from ajordan]
#
tantek
geppy ^^^
#
MMN-work
ajordan: and I think that's un-ideal and I want to have a discussion how to bring IndieWeb oriented people into this group, so we get a broader perspective etc. etc.
#
geppy
thanks, tantek
#
Zakim
sees no one on the speaker queue
#
tantek
lets aaronpk take this one
#
tantek
as he is a co-chair ;)
#
MMN-work
cwebber: aaronpk, ben.thatmustbe.me, tantek, you are indieweb people do you want to take this?
#
MMN-work
aaronpk: I'm not sure what to say about this.
#
MMN-work
tantek: I guess the thing with the IndieWeb community is that it has a pretty strong focus on people just trying to get their own sites to work for themselves
#
MMN-work
tantek: So most time spent in the community is getting thing to work for themselves rather than inventing and creating new things. So the community is more a support role to get things setup.
#
MMN-work
tantek: A small subset is on the cutting/bleeding edge pushing the tech boundary
#
MMN-work
tantek: Those people are doing it basically because of the "scratch your own itch" principle in the IndieWeb community.
#
Zakim
sees no one on the speaker queue
#
Zakim
sees cwebber on the speaker queue
#
MMN-work
tantek: That is: "Don't just invent shit, but make something useful".
#
ben_thatmustbeme
wonders who in here has their own social web apps and if we have a list of those
#
geppy
has one he hasn't made public yet
#
geppy
would be interested in a list
#
saranix
has a non-public app
#
MMN-work
tantek: Sometimes multiple people want to add new features that are the same and end up in collaborating. Otherwise someone brainstorms, then someone else comes along and thinks "what did others do? can I piggyback and not reinvent?"
#
ben_thatmustbeme
suggests people at least add info to https://www.w3.org/wiki/Irc-people
#
jaywink
a single user instance running software like mastodon should also count :)
#
MMN-work
tantek: Me, aaronpk, ben have worked on pushing the boundaries for our own sites. I'm not sure that's the answer looked for but maybe it gives some context.
#
ben_thatmustbeme
I bring that up because my biggest interest would be seeing even just public posts accessible and federating between sites
#
MMN-work
cwebber: This group is open for people to post topics. The goal of the group is try to get people working on decentralised social web techs can collaborate and discuss
#
MMN-work
cwebber: I think this group is more than open for that kind of stuff, and that's somewhat why aaronpk is co-chair
#
Zakim
sees cwebber on the speaker queue
#
cwebber2
ack cwebber
#
Zakim
sees no one on the speaker queue
#
MMN-work
cwebber: ajordan, do you think this has answered your concerns?a
#
saranix
agrees this group is open and welcoming
#
ben_thatmustbeme
so a lot of the AP work and hammering out specific pieces of the spec, but my goal has always been, lets get some simple set of things working
#
MMN-work
ajordan: There was not a lot of feedback when we discussed WebSub, so I wondered how we could get more feedback on things that aren't just ActivityPub.
#
ben_thatmustbeme
I would point out that almost every project in the independant social media now has microformats, because even getting public posts readable by the indieweb was a huge first step
#
MMN-work
aaronpk: In Germany a week ago we had a good discussion on private WebMention specs. I could invite some of those to next week's call.
#
ben_thatmustbeme
I also rewrote the microformats-ruby parser so that its actually high quality now, so if anyone wants to use it, they can easily parse their public pages
#
MMN-work
cwebber: Even though ActivityPub, MicroPub, WebMention have gotten a lot closer but they're not the same spec. But they've grown by being discussed togetherish
#
ajordan
ben_thatmustbeme++
#
Loqi
ben_thatmustbeme has 73 karma in this channel (230 overall)
#
ajordan
for popping up out of nowhere *everywhere* and being like "HAVE YOU CONSIDERED ADDING MF2 MARKUP??"
#
MMN-work
tantek: I think that's a good community curating methodology. Encouraging a plurality of approaches, even if they don't immediately work together, tends to approve all of them.
#
Zakim
sees no one on the speaker queue
#
MMN-work
s/approve/improve/
#
MMN-work
cwebber: 30 seconds left
#
ben_thatmustbeme
haha, ajordan
#
Loqi
rofl
#
MMN-work
cwebber: I encourage everyone to file topics for next week. Thanks everyone for coming.
#
tantek
+1 to discussing private webmentions also
#
MMN-work
cwebber: I look forward to continuing conversation on IRC
#
ben_thatmustbeme
ajordan, i added them myself in several cases
#
Loqi
mmn-work has 4 karma
#
cwebber2
geppy++
#
Loqi
geppy has 2 karma
#
nightpool
cwebber2++ for chairing
#
Loqi
cwebber2 has 88 karma
#
cwebber2
MMN-work++
#
Loqi
mmn-work has 5 karma
#
MMN-work
everyone: thank everyone for being awesome
#
Loqi
slow down!
#
wilkie
geppy++
#
ben_thatmustbeme
Loqi karma flood
#
aaronpk
trackbot, end meeting
#
trackbot
Zakim, list attendees
#
trackbot
is ending a teleconference.
#
Zakim
As of this point the attendees have been geppy, MMN-work, cwebber, aaronpk, nightpool, ajordan, jaywink, ben_thatmustbeme, saranix, astronouth, wilkie
#
trackbot
RRSAgent, please draft minutes
#
RRSAgent
I have made the request to generate http://www.w3.org/2017/06/07-social-minutes.html trackbot
#
trackbot
RRSAgent, bye
#
RRSAgent
I see no action items
#
geppy
Thanks all, I'll have to go back and read the bits I missed due to disconnecting.
#
ajordan
MMN-work++
#
ajordan
geppy++
#
MMN-work
Poor MMN-o not getting any ++
#
ajordan
ben_thatmustbeme: lol but still
#
MMN-work
:P
#
ajordan
I feel the same about aaronpk and tantek
#
cwebber2
MMN-o++
#
Loqi
mmn-o has 1 karma in this channel (2 overall)
#
geppy
MMN-o++
#
Loqi
too much karma!
#
MMN-work
Thanks all, I'm off to meet hannes2peer now! (quitter.se)
#
ajordan
"HAVE YOU CONSIDERED THE FACT THAT THIS IS A MONOCULTURE??"
#
geppy
haha
#
ajordan
MMN-o++
#
astronouth7303
+1 monoculture
#
ajordan
(to be clear they're 100% right about monocultures being problematic, I just find it amusing)
#
ajordan
geppy++
#
ajordan
for "off to implement"
#
astronouth7303
i lost it; where do i ask about fixing my wiki login?
#
ajordan
astronouth7303: #sysreq I believe?
#
ajordan
but first
#
tantek
I like quitter, it still supports "following" my site via only Websub(PuSH)+AS1/AtomXML
#
nightpool
sysops I thought
#
ajordan
did you fiddle with your password?
#
tantek
yeah #sysreq
#
ajordan
nightpool: I typo'd earlier
#
astronouth7303
ajordan: no, and i think the main site has a password policy against your suggestion?
#
MMN-work
tantek: JSON is for people who don't understand XML.
#
ajordan
astronouth7303: no it doesn't
#
nightpool
Yeah I tried a 15-character password and it still wouldn't work
#
tantek
MMN-work: I've been too lazy (low priority) to rewrite my AS1/AtomXML feed in anything JSON
#
ajordan
nightpool: was it alphanumeric only?
#
nightpool
yep
#
astronouth7303
ajordan: i'll reset it again. What's the account management page? It's non-obvious.
#
tantek
not that I'm a fan of XML, it's just that that work is already a sunk cost
#
nightpool
Oh, wait
#
nightpool
on the wiki front page
#
nightpool
"Due to spam increase, W3C has had to limit who can edit this wiki to holders of a W3C account with Member access. Note that you must log in with your account in order to edit the wiki"
#
nightpool
We don't have member access
#
nightpool
because we're just part of the community group
#
astronouth7303
who does?
#
ajordan
nightpool: that's misleading
#
tantek
uh that doesn't sound right. pretty sure any invited expert can edit the w3c wiki
#
nightpool
We're not invited experts though?
#
nightpool
we just showed up
#
astronouth7303
just showed up
#
ajordan
I think it's anyone with a W3C account but I'm not sure
#
tantek
I have to check on the difference between CG members and invited experts
#
tantek
yeah ajordan that's what I thought too
#
ajordan
I got access to the wiki before I got approved as an Invited Expert but that might have been because I got some "trusted" flag because sandro was asking in #sysreq
#
ben_thatmustbeme
oh yeah, i remember a year or so ago someone completely hosed the wiki with spam
#
ben_thatmustbeme
they had to add some limitations
#
astronouth7303
so is the current solution to spam the chairs with agenda items?
#
ajordan
astronouth7303: I'm looking for the user management page in my history atm
#
ajordan
hey aaronpk/tantek is there a difference between chat.indieweb.org/social and socialwg.indieweb.org/irc?
#
ajordan
should one redirect to the other?
#
astronouth7303
ajordan: thanks. I don't have the right browser right now, though :/
#
tantek
ajordan, you gotta make sure your icon is in two places ?
#
tantek
indieweb.org/irc-people and w3.org/wiki/irc-people
#
ajordan
oh tantek I didn't even notice that :D
#
ajordan
I should fix that
#
ajordan
is `strugee` on Freenode
#
ajordan
mostly I was just thinking that they seem to be the same thing and wondering why
#
Loqi
I agree
#
ajordan
shrugs
#
ajordan
thx Loqi
#
aaronpk
i'm gonna eventually fix chat.indieweb.org to use the right icons then will redirect the other one there
#
Loqi
you're welcome, ajordan
#
aaronpk
it's a slow process, i have a lot of things on my list :)
#
ajordan
I'm sure :D
#
ajordan
oh also PSA to everyone here in the CG: please add yourselves to the wiki pages tantek linked above! then you'll show up with a picture next to your name in the IRC archives :-)
#
astronouth7303
as soon as we sort out wiki account access :P
#
tantek
astronouth7303: hey anyone with their own site can sign-in to the indieweb wiki :)
#
tantek
#nonewpasswords
#
astronouth7303
tantek: their own indieweb site? because i'm not sure that's easier
#
tantek
astronouth7303: it's much more under your own control than asking a gatekeeper to help with a new account
bblfish, timbl, tantek, ajordan and bblfish_ joined the channel