KevinMarks_, rowan and KevinMarks joined the channel
#cwebber2Gargron, aaronpk: what's considered best practice for a third party app that's a FOSS desktop/mobile client registering with OAuth? you can't keep an app-level secret, so presumably each individual user client instance should register as a separate app, right?
rowan joined the channel
#ben_thatmustbemerhiaro: must not use pieces specifically disallowed
#cwebber2aaronpk, seems better indeed... I guess this would probably be a good idea for Mastodon to adopt, since most clients are public
rowan, xmpp-social and ajordan joined the channel
#rhiaroben_thatmustbeme: where does it say which parts are specifically disallowed?
rowan, jankusanagi_ and JanKusanagi joined the channel
#ben_thatmustbemerhiaro: it doesn't specifically call out Json ld in parts that it disallows. I agree that could be worded clearer. But it's sort of late for that at this point. Can certainly go in to ED / eratta
rowan joined the channel
#rhiaroyeah, ED is under continuous development, so probably fine