I know it's not an option, but I'm guessing "none of them", because what would be the point for them? They are all too focused on replicating their closed counterparts
The crux of the issue is that we shouldn't need to talk about "your FEP" when we are talking about "servers focused on implementing the ActivityPub API". The spec as is *is enough*. You are moving the goal posts by pushing a definition of "generic server" when it doesn't need to,and you are creating a "No True Scottsman" by saying that implementation X, Y or Z is "incompatible" with ActivityPub API.
> I think FEP-1b12 Announce is not compatible with ActivityPub. It has different side effects, doesn't update shares collection.
Why?
Updating the shares collection is orthorgonal to the behavior expected from a Group actor that claims to support 1b12.
Sure, you can say that if the server does not update the shares collection, it's not fully compliant with AP APi, but there is nothing a Lemmy server to add every activity to the shares collection.
Also, reading FEP-aea97 and I don't see anything there that my modest little server made with a "dynamic language" doesn't do already.
And It's not even like what I am doing is novel or incredibly diffiicult. If you spent a little time embracing RDF and JSON-LD, you could take a look at what Vocata did and you'd see how easy it can be implement the AP API.
Maybe I am way over my head, but this seems like *exactly* what I am building right now and I'm not really building anything outside of ActivityPub C2S?
I mean... Yes, my current client assumes some specific profile for OAuth and the client will need a proxy to get some data remote servers (to bypass authorized fetch, or to resolve documents from transient activities), but doesn't seem to me that anything I am doing is outside of AP's scope?
The problem is rarely in parsing as2 context, but dealing with how different implementations decide to create projections from the data.
Take a simple poll. The 3 diffferent servers I saw were generating the text, the choices, and the replies collection in completely different ways. Without JSON-LD, each separate system would be fighting to figure out how to present the data.
I also *strongly* disagree with the idea that working with JSON-LD is worse. JSON-LD avoids me having to hand-roll json-schema validators for each separate implementation. JSON-LD lets me think only in terms of "how do I map this term to my internal system".
> You can't use abbreviated versions of the object.
Why not? I would expect the signature in a document only to authenticate the document, not as an intrument to validated the objects referenced in the document.
Depends on your definition of "malicious", but there are servers offering "community migration" that works by taking all the objects from one actor and rewriting as their own and changing the to/audience fields. Somehow this rubs me the wrong way.
I mean "using something like Linked Data signatures, so that anyone can verify the authenticity of the message even if it server is not around anymore"