Show Navigation
Conversation
Notices
-
@Hubzilla Development+ I'm playing with the pubcrawl plugin for ActivityPub protocol. Is there anything special I need to do when adding contacts via this protocol? I tried to do it with a channel that only has that protocol plugin enabled, but visually there's no way to distinguish it from OStatus.
I connected my test channel with my Mastodon account, and everything seems to federate just fine. But I have no idea whether I needed to do anything fancy.
-
Am I mistaken in thinking that AP servers don't need to rely on the full URL to a specific profile? Or are handles still an accepted convention?
-
@dsh "I tried to do it with a channel that only has that protocol plugin enabled, but visually there's no way to distinguish it from OStatus."
At the risk of sounding like a broken record, there isn't much non-visual ways to distinguish it from OStatus either.
-
Handles aren't used in ActivityPub. If you use the URL you should get an ActivityPub connection.
Mario suggests that Mastodon is failing to import messages we originate (including follow requests), and I don't know what can be done without getting somebody there to investigate. AFAIK our AP messages are legal and conforming (currently). They will go unlawful in the future when we allow AP to cross-federate with other protocols.
-
Oh hang on - I think Mastodon will answer webfinger requests on URLs, as we also do. So if you want an ActivityPub connection, you can connect to a specific protocol by using protocol: before the thing you want to connect to in the Follow box. In this case activitypub:{{their url}}
-
Mike, did you implement signing with LDS? Mastodon did, though it's not really in spec. I assume they will reject anything that isn't signed, but this is guess work. You would probably need to contact Gargron.
-
We generate HTTP Signatures, LD Signatures, and magic envelopes. LD Signatures are fatally flawed/worthless and we'll use them if that's all you've got, but we will always prefer a reliable signature method and only validate LD Sigs as a last resort. HTTP Sigs work well, but can only be used to validate a sender - and won't do a thing for validating the author if you're relaying comments downstream.
Curiously Mastodon doesn't sign Follow activities currently, but they do sign posts/comments.
-
I know (re http sigs), and that is exactly why Mastodon implemented signatures in the payload even though they're not in spec. I was just asking if you were aware, no need to lecture. I doubt anyone is happy that there is no signatures in the spec.
-
Signatures are in the spec, but only by name - and we're left swinging in the wind when it comes to implementation and interoperability. And of course that's where everything always goes bloody wrong.
-
payday advance loans <a href="http://paydayloans2017.com"> payday loans direct lenders only</a> <a href="http://paydayloans2017.com"> payday loans with no bank account</a> what is a payday loan payday loans online no credit check instant approval
-
Small correction, for services which speak multiple protocols, you can connect via a specific protocol by using [protocol]identifier - so [activitypub]https://some.where/users/foo or [diaspora]tony@xyz.abc
valid protocol identifiers currently are zot, diaspora, ostatus, activitypub, and rss. 'zotvi' is coming soon if you want to try out Zot6.
Sean Tilley
All Jonkman Microblog content and data are available under the