Untitled attachment

Notices where this attachment appears

1. pistolero :thispersondoesnotexist: (p@freespeechextremist.com)'s status on Monday, 15-Jan-2024 01:33:14 JST pistolero :thispersondoesnotexist:

   in reply to
   @mint @p @Moon
   
   > https being hardcoded even in AP objects/actors makes it a pain in the ass.
   
   Accurate. The stupid "https everywhere" meme claims more time. (Incidentally, one of the first rules of HTTP is that you do not construct URLs, you follow links. Nobody does it that way, but this problem would not exist if everyone did.)
   
   > Did anything get received?
   
   I see occasional errors that it couldn't fetch, e.g., https://ryonagujouss6tp6tpuxdjonaetk24b4ksekvkktnwxutq2m3mhhu5qd.onion/.well-known/webfinger?resource=acct:mint@ryonagujouss6tp6tpuxdjonaetk24b4ksekvkktnwxutq2m3mhhu5qd.onion , and I see some that look like webfinger logs: "2024/01/13 10:24:21 finger lick: acct:p@pbuhwjjhrzcvrghtfqlwqlgabuzc7jnkqv4swekxjvv7pgubd7jjoiqd.onion". It's probably sending back a bunch of (bad) HTTPs URLs that you can't actually fetch. After I got it to make a request by tracing it down a ways, I grepped the codebase for "https" and there are a few dozen at least, so they'd all need to be replaced with a decision. (The fedilist crawler had an easier time with this: instead of "Get these URLs", the logic is higher-level so the "https" only needed to be replaced in one place.)
   
   > Did anything get received? The only request I see in logs is to the user profile.
   
   I don't think anything came back; I can't see anyone. I tried following some people from the cleartext addresses but it's probably sending you HTTPS URLs to send the "Accept" activities to.