Alex Gleason
Nostr seems like it was written by somebody who hates words and didn’t read the ActivityPub spec even once. Not that ActivityPub has great names either, such as “Announce” and “Note”. But Nostr is… NUMBERS. Do you know what type of event 3 is? I already forgot. They also have tags - which are all a single letter. There’s a “p” and an… “e”? I think.
There’s also a thing that does the exact same thing as Webfinger (NIP-05), but doesn’t use Webfinger for no reason.
skylar :confederateflag:??? :z:
Alex Gleason
@skylar There actually is a command line tool called Nostril https://github.com/jb55/nostril
…made by the same guy who named is iOS app “Damus” because of Nostradamus.
MattZ
Alex Gleason
@colinsmatt11 What would it look like to use a JWT instead of HTTP Sig? Is it still an HTTP header?
MattZ
:cacodemon_fast_spin:
Alex Gleason
@dielan Indeed. That’s why I’m learning as much as I can right now.
Alex Gleason
@Moon @dielan I’m generating a Nostr vanity public key. See you when my computer works again.
Sexy Moon
Alex Gleason
CuBros Soulja Boy
Alex Gleason
@Moon @dielan https://github.com/grunch/rana
Use rana -n m00n. You want the Bech32 format, not the hex. It’s alphanumeric but missing some ambiguous letters like O
Sexy Moon
lainy
Râu Cao ⚡
ew
:cacodemon_fast_spin:
ew
:cacodemon_fast_spin:
Sexy Moon
ew
silverpill
@colinsmatt11 @alex Actually, Mastodon implemented Linked Data signatures back in 2017. They're using Ruby JSON-LD library but for many other languages similar library simply doesn't exist, that's why everyone uses HTTP signatures.
I proposed an alternative here: https://codeberg.org/fediverse/fep/src/branch/main/feps/fep-8b32.md (the document recommends JCS instead of JSON-LD/RDF which is easier to implement)
Also, some people believe that signing activities is bad because you can't deny that you wrote a post you wrote.
Alex Gleason
@Moon @dielan Ground floor. I’m thinking about building a bridge. There’s a lot of potential.
Sexy Moon
Neko McCatface v2023 :verified::makemeneko:
MattZ
Alex Gleason
Update: I’ve become convinced that numbers are actually a better design choice than words for event types, since numbers can have the same name but you can deprecate the old one. Eg instead of “repost” and “repost_but_better” you can just go from 6 to 7 and they’re called “repost (deprecated)” and “repost”.
“p” and “e” are still questionable.
Moon
Alex Gleason
@dbdf3807187591723175334ce628cb1a139ff1c98c3790630e91c38c3432a578 Presumably you use a really high number for experiments and then try to get it standardized.
Alex Gleason
@silverpill @colinsmatt11 LD signatures is also the thing that had “a major security vulnerability” in Mastodon and whose draft spec says “only a masochist would implement this” (paraphrased, but not joking)
silverpill
@don @colinsmatt11 @alex Authentication/authorization is briefly mentioned in the spec but it looks like authors didn't want to recommend any specific mechanism (because both HTTP sigs and LD sigs were in early draft stage).
don
@silverpill @colinsmatt11 @alex I didn't see any mention of HTTP signatures in ActivityPub specs. They were introduced by Eugene as an antispam feature. Or they were a part of Mastodon implementation before Mastodon migrated to AP
opal hart
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.