#social 2017-09-18

2017-09-18 UTC
#
cwebber
lambda: finally, on the last one:
#
cwebber
Ef7MlxLXoBovhil3AlyjtBwAL9g4TN3tibLj7uuNB3CROat/9KaeQ4hW2NiJ+pZ6HQEOx9vYZAyi+7cmIkmJszJCut5kQLAwuX+Ms/mUFvpKlSo9StS2bMXDBNjOh4Auj774GFj4gwjS+3NhFeoqyr/MuN6HsEnkvn6zdgfE2i0=
#
cwebber
I mean
#
cwebber
probably yes if the other ones did :)
#
cwebber
but just checking
#
cwebber
lambda: I assumed so for the last one, but anyway, submitted a PR https://github.com/w3c-dvcg/http-signatures/issues/21#issuecomment-330103855
#
Loqi
[cwebber] The above PR should fix things. @lambdalambda (who also bumped into this) and I cross-checked our implementations and we both got the same results here.
#
cwebber
oops
#
cwebber
I got your username wrong I think
#
cwebber
nice
#
cwebber
already merged!
#
cwebber
also nice, Manu is issuing a new version number with the fix
#
erincandescent
The httpsigs spec really doesn't seem well tended
#
erincandescent
lots of references to drafts of specs which ahve sicne rleeased
#
cwebber
erincandescent: I think Manu is pretty overwhelmed by editing All The Specs right now would welcome PRs :)
#
cwebber
*but would
#
cwebber
he merged my PR in minutes! :)
#
erincandescent
He does seem to have an Awful Lot of them
#
lambda
yeah, the link to valid encryption methods 404s, too.
#
cwebber
new draft out with the fixed examples https://www.ietf.org/id/draft-cavage-http-signatures-08.txt
#
cwebber
I'd love to help on the URLs but I don't really have time
#
cwebber
erincandescent: lambda: since you've already identified the links which are wrong, maybe file an issue?
#
cwebber
I can submit a fix for them if you point them out, just don't have time to comb through.
xmpp-social joined the channel
#
csarven
I find the emoji input/storage discussion interesting because it appears to be similar decision making to input/storage of mathematical objects. For instance, users may using syntax like TeX, ASCIIMath, MathML, and the question (at least to me) is to decide on what to preserve. MathJax is JS library that can render all of them consistently and normalise on MathML (and SVG and maybe others). So, I wonder if it makes sense to store the MathML and forget about
#
csarven
what was original input. This is a bit similar to the original (unicode)emoji discussion I think.
#
puckipedia
csarven: I guess you'd use "source" for e.g. text/html+TeX, and then have it rendered into an img or so, embedded in the actual content?
jankusanagi_ joined the channel
#
cwebber
csarven: you're right I think
cdchapman joined the channel
#
cwebber
the w3c is making a big mistake by allowing DRM to unravel the web :(
#
Loqi
it'll be okay
#
cwebber
Thanks Loqi, though unfortunately this time I'm not sure it will. :\
#
Loqi
you're welcome
#
cwebber
:P
#
ben_thatmustbeme
!tell ajordan still waiting on those edits you had for jf2
#
Loqi
Ok, I'll tell them that when I see them next
albino joined the channel
#
puckipedia
semantic question: should I link towards the /activity/ or the object itself
#
puckipedia
actually woops I found this myself. always link to the object, not the activity. the Create is not semantic and you don't Announce a Create etc
#
cwebber
that's right puckipedia
#
csarven
I think they are different use cases. Could link to either
#
puckipedia
csarven: I'll probably add a tiny icon or something, but primarily I'll link to the object
#
csarven
What does the icon represent?
#
csarven
I'm missing context here.
#
puckipedia
csarven: the link to the activity
#
puckipedia
like. if you press the time, or something (or the 'created'), it'll go to the object, instead of the create
#
csarven
sure. could do either. depends what or how much information is useful for the user in that context
#
csarven
with some consideration to whether the information in the activity should be hidden/inaccessible to the user
#
csarven
reads cwebber's drm
#
cwebber
btw we have one of the more prominent members of the Mastodon community, who claims to have been working on an ActivityPub implementation, expressing unease about participating in the SocialCG and working on W3C tech with the W3C's decision to move forward on DRM https://mst3k.interlinked.me/@Elizafox/1481456
#
Loqi
[Eliza Hot & Sexy Takes KSC ???] I don't know how I feel about participating in ActivityPub after this esp as I was in the midst of starting an implementation.
#
cwebber
I will continue to co-chair the SocialCG but I empathize.
#
cwebber
a clearer statement from them: https://mst3k.interlinked.me/@Elizafox/1481576
#
Loqi
[Eliza Hot & Sexy Takes KSC ???] @cwebber My official position is that the W3C has done the wrong thing. I worry deeply about the future of the open web, and the future of standards. The motivations of the W3C are unclear here, but appear to be financial. If financial considerations...
#
ajordan
ugh ben_thatmustbeme I'm the worst
#
Loqi
ajordan: ben_thatmustbeme left you a message 2 hours, 24 minutes ago: still waiting on those edits you had for jf2
#
ajordan
thanks for the ping, I'll do that today
#
ajordan
cwebber: :/
#
cwebber
the EFF's open letter to the W3C is worth a read btw https://www.eff.org/deeplinks/2017/09/open-letter-w3c-director-ceo-team-and-membership
#
erincandescent
There's some irony that I once had a draft of a then pump.io extension which used EME (specifically with the "org.w3.clearkey" crypto system)
#
aaronpk
i honestly haven't been following this that closely. but what's stopping browsers from implementing something similar if the W3C didn't actually publish the spec
#
erincandescent
nothing whatsoever
#
ajordan
erincandescent: for the same reasons the W3C gave?
#
erincandescent
ajordan: because HTML video doesnt' let you do OAuth type stuff on the requests it generates
#
ajordan
aaronpk: I'm not sure but I think Cory Doctorow mentioned that there was some kind of antitrust thing actually
#
erincandescent
also to avoid having to proxy the video content through your local server
#
ajordan
lemme see if I can find the clip
#
cwebber
the EFF had proposed a covenant
#
erincandescent
it embedded the encryption key inside the AS object & let you dump the video file on a publicly accessible server (say, a CDN)
#
ajordan
erincandescent: makes sense, but how does that require Clearkey?
#
ajordan
cwebber: yeah I saw that, only skimmed it tho
#
cwebber
which would have been something similar to the patent promises w3c participants make
#
erincandescent
ajordan: "org.w3.clearkey" is how you use EME to do encrypted video using a cleartext key
#
erincandescent
erincandescent: clearkey is "please decrypt this video using this key" rather than "please decrypt this video using some opaque key the DRM system provides"
#
ajordan
ohhhh for some reason I thought "Clearkey" was a legit DRM scheme, I must have gotten it confused with something else though
#
cwebber
which would have protected security researchers
#
cwebber
from being sued for inspecting DRM systems, etc
#
cwebber
I don't understand why the W3C couldn't at least have adopted that
#
cwebber
if it did move forward with EME
#
cwebber
the patent protections stuff in the W3C is clearly considered such a win
#
cwebber
and the amount of risk that the DMCA puts someone at in this same space is comparable
#
cwebber
sure, vendors could have done it outside the w3c, but the w3c could have chosen to either adopt that covenant or say "ok, do it outside the w3c so the w3c does not endorse this being part of the web"
#
ajordan
cwebber: read your piece btw, very powerful
#
cwebber
thanks ajordan
#
ajordan
I'm sorry it happened that way
#
ajordan
people are complicated
#
ajordan
sure cwebber
#
ajordan
*sigh* pretty sure the quote about antitrust was in https://media.libreplanet.org/u/libreplanet/m/beyond-unfree-the-software-you-can-go-to-jail-for-talking-about/ but my internet is so bad I can't actally find it
#
cwebber
yeah Cory did talk about it
#
cwebber
I don't remember the specifics, but basically there's an opening for saying "okay, this DRM stuff being done out side of web standards is a move by media monopolies to..." but the W3C standardizing it muffles that argument
albino joined the channel