wagle, Ruxton, globbot, gRegorLove, sknebel, drkokandy, petermolnar_, aaronpk, GWG, ben_thatmustbeme, doubleloop[m], [Natris1979], [tantek] and tantek_ joined the channel
#petermolnar_slightly offtopic: why is akismet telling me I need to display GDPR consent?
#Ruxton"Added a hook to provide Akismet-specific privacy information for a site’s privacy policy."
#Ruxtonthey've done a few point updates since 26th may all around GDPR stuff
#Ruxtoncan dismiss the notification and it shuld stop displaying
#sknebelpetermolnar: "consent" would likely be wrong, but you have to inform since you hand them personal data
#sknebel(eh, I might be wrong, some articles I just read suggest you actually need consent due to their legal status, but that's pre-GDPR German sources, so unclear if that applies still)
#sknebelif you use Akismet, you send your commenters IP, name and e-mail address to a third-party outside Europe
#petermolnarthat's actually interesting, I honestly thought akismet checks the text only
enjikaka and [jgmac1106] joined the channel
#[jgmac1106]My Askimet says if anybody in Eurpoe uses your site. If not no worries
#petermolnar[jgmac1106]: "uses" - what does that mean? Is that a mere visitor? A commenter? A author?
#[jgmac1106]To help your site be compliant with GDPR and other laws requiring notification of tracking, Akismet can display a notice to your users on your contact form. This feature is disabled by default, however, if you or your audience is located in Europe, you need to turn it on.
#sknebelpartly because of that the recommendation for notes has been to mark the content up both as content and name
#sknebelso it can't accidentially happen that a wrong name is guessed
#[jgmac1106]yeah it kills me leaving the posts untitled and then having a page of post called (no title) makes searching for notes PITA, but minor inconvienence
[kevinmarks], jgmac1106, [cjwillcock], [tantek] and [pfefferle] joined the channel
#aaronpkin the case that the website you're using when you're signing in also has its own indieauth server, then web sign-in can be completed through indieauth
#[pfefferle]i like the idea, if you have a lot of WordPress sites, you manage
#[pfefferle]and as long as we provide the login form, it should work
#aaronpkif your site does not have its own indieauth server, then you end up doing relmeauth, and this is where the confusion happens
#aaronpkso for example, if your site is notiz.blog and you don't have any plugins installed, and you'r etrying to sign in to indiewp.com, then indiewp.com needs to do relmeauth to your twitter profile for instance
#aaronpkthat's normally what you'd use the indieauth.com server for, so that indiewp.com doesn't have to impleement the twitter API itself
#aaronpkbut if notiz.blog *does* have an indieauth server, then indiewp.com shouldn't do relmeauth and should instead talk to that indieauth server directly
#[pfefferle]is it so? I think it currently has no indieauth.com/indielogin fallback
#aaronpkriight, and that's why this keeps not working
#aaronpkthis logic of "use the indieauth server if present, otherwise do relmeauth" is all built in to indielogin.com
#aaronpkso this web sign-in feature for wordpress should probably just *always* use indielogin.com to authenticate people. since it's a completely separate feature from providing an indieauth authorization server for signing in to other apps
#[pfefferle]hmmm... now I get your point, but I do not completly agree... I am aware of indieauth, so I do not like to have a "service in the middle"... perhaps we need a setting, so the user can choose between the "web-sign-in" or the "indielogin.com" form
#aaronpkmy actual point is that these are two completely different features, and i think it's confusing everyone having them in the same plugin
#[pfefferle]understood and I agree that it might be too complex for > gen 2 users
#aaronpkso it might even be better to move the web sign-in part into its own web sign-in plugin, so that feature can be enabled independently of the plugin providing an indieauth server
#aaronpkand in that case, I can also see that some people might want to support web sign-in via indieauth+relmeauth, or just via indieauth with no external dependencies like you're saying
#[pfefferle]I would love to try it like it is, starting with a nicer settings UI and more user friendly documentation
#[pfefferle]but I understand you point and if we don't get it to work, we really should split it!
#aaronpkwell in any case, we should get the terminology straight