[snarfed]can you describe why you don't like it? it's very common in wordpress, right? tons of existing plugins let you change behavior for specific categories like this, and tons of people use them
[asuh]So even if someone shares a URL that’s unlisted, similar to snarfed’s post, it wouldn’t work until you log into yourself to view the site content which would magically show the post
[asuh]I increasingly don’t trust robots.txt and noindex attribute values to actually do much for privacy. Maybe it’s still legit and valid for most use cases, but the friction of requiring universal indieauth usage for private posts seems ideal. Or allowing other types of auth that exists whether FIDO or SQRL
[snarfed]right! you're choosing a different point on the security vs friction spectrum. totally valid. that kind of freedom is a great strength of the indieweb.
[snarfed]none of the people i want to share with have indieauth logins, and none of them will set one up just to see my pictures, so it's the wrong choice for me personally, but c'est la vie!
[asuh]snarfed: right, i’m guessing that’s true of most of my contacts as well. just like it took almost a decade for mainstream social media usage of specific platforms, so would it take for this type as well. I’ve been thinking about this issue for a long time with no results yet but love seeing this discussion to jog my thoughts
[David_Bryant]My plan is to write out a detailed description of my ongoing attempts to enable IndieAuth with WordPress on Dreamhost. The TL;DR of that is I have a top level domain that is shared hosted by Dreamhost and contains a number of top level subdirectories with web content (/articles, /apps, etc.). I used DreamHost's "One Click Install" feature to install WordPress as /blog, and then used the WordPress console to administer that installa
[David_Bryant]have to figure out whether a service like OwnYourGram wants me to auth as orangemoose.com vs. orangemoose.com/blog but one or the other seem to work.
[David_Bryant]IndieWeb plug-ins. I've configured my domain top level index.html to contain the necessary IndieWeb endpoints, an h-card, etc. I want to use the WordPress blog as the place for content I'd syndicate outward into the IndieWeb itself. Many things seem to work just fine (RSVP, microformats, syndication, webmentions, brid.gy, etc.). I do still get the error message from the IndieAuth plugin though, and the check script fails. Occa
[snarfed]hey GWG, any idea if there's an easy way to turn off advertising the webmention endpoint on some posts? (personally i'm thinking posts in a given category, but could be tag or kind or whatever)
[snarfed] asuh yes, that's the main way we've prototyped private posts so far. http://indieweb.org/private_posts
[asuh] I increasingly don’t trust robots.txt and noindex attribute values to actually do much for privacy. Maybe it’s still legit and valid for most use cases, but the friction of requiring universal indieauth usage for private posts seems ideal. Or allowing other types of auth that exists whether FIDO or SQRL
david.shanske.com edited /Wordpress_IndieAuth_Plugin (+78) "/* Apache htaccess solutions */" (view diff)
[pfefferle] I think we reverted it because there where a lot of people who want to disable pingbacks but not webmentions