#social 2018-11-02

2018-11-02 UTC
#
dansup
jdormit_mobile: hey, did you get http sigs working yet?
#
jdormit_mobile
Yeah, I've had them working for a bit (although it's possible the latest release of Mastodon broke them again, I'm seeing SSL issues and I'm not sure if it's the bad public key thing from above or if my signatures have started failing to verify
#
jdormit_mobile
)
#
jdormit_mobile
I'm looking into it more tomorrow morning, I'll report back
xmpp-social, Angle, timbl and jdormit joined the channel
#
jdormit
Okay, I've confirmed that the signature verification issues I was having were due to Mastodon having a local copy of my Actor without a public key
#
jdormit
On my development instance of Mastodon, I resolved it by deleting the actor from the accounts table and re-adding them via the UI
#
jdormit
But I'm not sure how to resolve it for production instances of Mastodon
#
jdormit
I don't think the accounts table ever gets updated/purged, so I can't think of a way to tell Mastodon to re-fetch my actor
#
rialtate[m]
jdormit: maybe a Delete might work
#
aaronpk
I should hope a Delete would only work if signed, otherwise anyone could delete anyone else's account
#
heluecht[m]
Yesterday nightpool write that the profile data is cached for a day.
#
heluecht[m]
wrote
#
rialtate[m]
aaronpk: origin?
#
heluecht[m]
I would never delete an account when the delete message doesn't validates. I think this should be the only way.
#
heluecht[m]
Everything else would really be some security problem.
#
rialtate[m]
heluecht: they said webfinger, not actor obj.
#
rialtate[m]
I've seen it hold on to a bad copy of the actor obj for months with no relief in sight
#
rialtate[m]
Unless maybe that has changed in some version
#
heluecht[m]
Best thing is to create some issue when you think that a system doesn't react as intended. I did so with Pleroma and Mastodon and they applied the suggested changes.
timbl_ joined the channel
#
jdormit
i feel like mastodon did the right thing, in this case...
#
jdormit
i might just have to get a list of affected accounts and ask the admins of the various mastodon instances to manually delete from the db
jdormit_mobile, timbl, Angle, dlongley, jdormit` and dmitriz joined the channel