#social 2017-09-14
2017-09-14 UTC
KevinMarks, cdchapman, xmpp-social, KevinMarks_ and ben_thatmustbeme joined the channel
# 
xmpp-social [suesserboy] hello
KevinMarks and KevinMarks_ joined the channel
# puckipedia time to build a web client for Kroeg
KevinMarks joined the channel
# puckipedia (using a stateless template language, and a small custom web framework hehe)
# xmpp-social [suesserboy] hello my friend
tantek and KevinMarks joined the channel
# cwebber go puckipedia !
# puckipedia welp a stack overflow. and it's going to be really difficult to debug
# puckipedia randomly guesses
# puckipedia okay so I found where the stakc overflow iis, kinda? hmm. it's a weird self-referential object
# puckipedia oh no it's the publicKey
# puckipedia .. I think?
# puckipedia oh no I made a real big mistake lol
# puckipedia I now have two headers and I don't know where they come from
# puckipedia firefox doesn't seem to use my accept header when checking OPTIONS
# puckipedia woo, my JS renderer is now feature-complete compared to my C# one
# puckipedia (next step is to, instead of rendering into a string, render it into a div managed by a "Renderer", which dynamically updates based on data store updates)
# cwebber jaywink, so helpful
# cwebber puckipedia: oh hey nice!
cdchapman, KevinMarks_ and KevinMarks joined the channel
# cwebber hey Gargron
# cwebber you include the Digest http header in your http signatures support/implementation it looks like, which is good
# cwebber but it seems to me that there isn't any "requirement" in here that there be a digest, and a check that the digest actually matches the body, is there?
# cwebber it seems like you'd want to do that to consistently check that the body is verified through the signature?
KevinMarks joined the channel
# puckipedia cwebber: currently I I do verify that the *header* is correctly signed, but I don't check the value
# puckipedia going to add that as a middleware before anything else\
# cwebber puckipedia: I'm not sure what you mean by "check the value"
# puckipedia like, if you sign the digest header, I will check the signature to be valid
# cwebber puckipedia: you mean that the digest is present and matches?
# cwebber puckipedia: gotcha, right
# cwebber puckipedia: it seems like in the cases where http sigs are important, not forgetting to make sure it's both there and matches is important
# cwebber otherwise you can always swap out the body's content
# cwebber which would be... not the best :)
KevinMarks_ and KevinMarks joined the channel