#social 2018-10-26
2018-10-26 UTC
# 
dansup aaronpk: hey, just want to thank you for your work on Nautilus. I was able to use your verify() http sig logic (and mastodons header regex) to get it working! Still using another library to send signed requests
# heluecht[m] Concerning HTTP signatures: Since you can sign different fields (date, content-length, digest, host, ...) you could also sign only a single field. Are there any definitions, that at least some specific fields has to be signed?
vt, dmitriz, xmpp-social, dan, timbl and jdormit_mobile joined the channel
# nightpool[m] no but there probably should be
# heluecht[m] Thanks for the hint. I was thinking about just refusing posts that haven't got neither the date nor the digest. Everything else could be used for replay attacks
# nightpool[m] I mean, even posts with the exact same digest could be used for replay attacks, if you're clever enough
# nightpool[m] Like, if someone blocked someone else, and then unblocked them, an attacker could replay the old block activity
dmitriz joined the channel
# heluecht[m] Something else: Do you know, what Mastodon is doing with activities and object types that are unknown?
# nightpool[m] they're discarded
# heluecht[m] But they don't bother the admin with error messages or so? I'm asking, because at Friendica we are using activities like "dislike" and object types like "Event".
# nightpool[m] nope, no errors.
# nightpool[m] we do convert some types to a "note" format, may be worth opening an issue for Event
puck joined the channel
# rialtate[m] I've been wondering if mastodon would ever support events and what the ux would look like
# heluecht[m] I had a look in Mastodon's source to see what is supported. You could support events like articles, just by showing the title (it's the same field) and linking the url. That's not ideal but better than nothing.
# nightpool[m] heluecht: can you open an issue for that?
# nightpool[m] thanks!
Guest84 joined the channel
# heluecht[m] Will try to do it later. Currently I'm working at our receiver class to enable support for more activities.
# heluecht[m] What was "Undo Accept Person" meant for?
# heluecht[m] AFAIK this was some equivalent to some other activity?
# nightpool[m] heluecht: it's Undo Accept Follow
# nightpool[m] which is the same as Reject Follow
timbl joined the channel