Conversation

Notices

1. Alex Gleason (alex@gleasonator.com)'s status on Friday, 10-Feb-2023 10:11:46 JST Alex Gleason

   Nostr seems like it was written by somebody who hates words and didn’t read the ActivityPub spec even once. Not that ActivityPub has great names either, such as “Announce” and “Note”. But Nostr is… NUMBERS. Do you know what type of event 3 is? I already forgot. They also have tags - which are all a single letter. There’s a “p” and an… “e”? I think.

   There’s also a thing that does the exact same thing as Webfinger (NIP-05), but doesn’t use Webfinger for no reason.

   • Token (coin@asimon.org)'s status on Friday, 10-Feb-2023 10:11:46 JST Token

     in reply to
     @alex Sounds like a nightmare to work with.
   • LS (lain@lain.com)'s status on Friday, 10-Feb-2023 10:34:52 JST LS

     in reply to

     • スカイラー🎄🇷🇺 :z:
     • Râu Cao ⚡
     @raucao @skylar @alex idk sounds like a cancer
   • Râu Cao ⚡ (raucao@kosmos.social)'s status on Friday, 10-Feb-2023 10:34:53 JST Râu Cao ⚡

     in reply to

     • スカイラー🎄🇷🇺 :z:

     @skylar @alex It's Latin for "ours".

   • スカイラー🎄🇷🇺 :z: (skylar@misskey.yandere.love)'s status on Friday, 10-Feb-2023 10:34:54 JST スカイラー🎄🇷🇺 :z:

     in reply to
     @alex imagine naming your software after a nostril
   • silverpill (silverpill@mitra.social)'s status on Friday, 10-Feb-2023 11:07:14 JST silverpill

     in reply to

     • MattZ

     @colinsmatt11 @alex Actually, Mastodon implemented Linked Data signatures back in 2017. They're using Ruby JSON-LD library but for many other languages similar library simply doesn't exist, that's why everyone uses HTTP signatures.
     I proposed an alternative here: https://codeberg.org/fediverse/fep/src/branch/main/feps/fep-8b32.md (the document recommends JCS instead of JSON-LD/RDF which is easier to implement)

     Also, some people believe that signing activities is bad because you can't deny that you wrote a post you wrote.

   • MattZ (colinsmatt11@gleasonator.com)'s status on Friday, 10-Feb-2023 11:07:15 JST MattZ

     in reply to
     @alex I still think the biggest hurdle in AP is HTTP Sigs. They're horrible for so many reasons and have been abused.
     
     JWTs are better for signing an verification by a long shot.
     
     But why people haven't moved away from it? Mastodon being the bottleneck of fediverse as always.
   • don@liberdon.com's status on Wednesday, 01-Mar-2023 04:42:38 JST don

     in reply to

     • MattZ
     • silverpill

     @silverpill @colinsmatt11 @alex I didn't see any mention of HTTP signatures in ActivityPub specs. They were introduced by Eugene as an antispam feature. Or they were a part of Mastodon implementation before Mastodon migrated to AP

   • silverpill (silverpill@mitra.social)'s status on Wednesday, 01-Mar-2023 04:42:38 JST silverpill

     in reply to

     • MattZ
     • don

     @don @colinsmatt11 @alex Authentication/authorization is briefly mentioned in the spec but it looks like authors didn't want to recommend any specific mechanism (because both HTTP sigs and LD sigs were in early draft stage).

     https://www.w3.org/TR/activitypub/#authorization