#social 2018-07-10

2018-07-10 UTC
technomancy, timbl, xmpp-social, vasilakisfil and cwebber2 joined the channel
#
Gargron cwebber2: https://source.joinmastodon.org/mastodon/pub-relay what do you think of this
timbl joined the channel
#
cwebber2 Gargron: ah cool
#
cwebber2 basically a mailing list then?
#
cwebber2 in functionality
#
aaronpk I was going to say it sounds like an aggregator
#
aaronpk like how you can follow https://news.indieweb.org/en and people can post stuff there
#
puckipedia I recently found this really evil slight HTTP signature bug that doesn't occur in normal situations
#
puckipedia the (request-target) psuedo-header should be path *and* query
#
puckipedia Gargron: ^
#
aaronpk is that a problem?
#
puckipedia aaronpk: I can imagine that servers might do /user/puckipedia?inbox
#
aaronpk checks how he built the string for checking signatures
#
puckipedia I'm assuming I made this mistake myself somewhere but I hit it when using an unrelated API that did HTTP signatures
#
aaronpk oh I cheated cause I only handle verifying http signatures for one URL on my site, so it's just hardcoded
#
saranix aaronpk: me too
#
aaronpk and when sending, looks like i'm only including the URL path in what i'm signing, not the query string
#
puckipedia like, you have to send the http/2 :path psuedo-header
#
puckipedia which is path-absolute, optionally a '?' and query
#
aaronpk welp
#
aaronpk I have to say, ":path pseudo-header" was a pretty bad choice of name for that, since it in no way suggests that the query string is part of it
#
puckipedia I feel like parsing it as "whatever you normally GET/POST" is good
#
Gargron cwebber2: it's a pure activitypub equivalent of jaywink[m]'s federation relay for diaspora. so yeah kind of like a mailing list really!
#
Gargron a subscriber will send a Follow where the object is the global public collection
#
Gargron or so i am thinking
#
Gargron potentially they could then also send a Follow where the object is a hashtag
#
Gargron or something like that
#
saranix so...like hubzilla forums? why is it separate software and not built in?
#
nightpool[m] saranix: no, this is more of a backend thing
#
nightpool[m] to help improve discoverability