#social 2016-06-28

2016-06-28 UTC
shepazu, KevinMarks, cwebber2, jasnell, jet, Arnaud, Karli, jasnell_, tantek and annbass joined the channel
#
tantek
good morning #social!
KevinMarks2 joined the channel
#
sandro
trackbot, start meeting
#
trackbot
is preparing a teleconference.
RRSAgent joined the channel
#
trackbot
RRSAgent, make logs public
#
RRSAgent
I have made the request, trackbot
Zakim joined the channel
#
trackbot
Zakim, this will be SOCL
#
Zakim
ok, trackbot
#
trackbot
Meeting: Social Web Working Group Teleconference
#
trackbot
Date: 28 June 2016
#
sandro
present+
#
annbass
present+
akuckartz joined the channel
#
tantek
is dialing. delayed by Hangouts oddly
#
tantek
present+
#
akuckartz
present+
#
rhiaro
present+
#
aaronpk
present+
bengo joined the channel
#
cwebber2
present+
#
aaronpk
present+
#
bengo
present+
#
aaronpk
is the audio dropping periodically for anyone else? or is that my wifi?
#
annbass
scribenick: annbass
#
cwebber2
aaronpk, seems fine for the minute I've been in
#
aaronpk
calling back in..
#
tantek
zakim, who is here?
#
Zakim
Present: sandro, annbass, tantek, akuckartz, rhiaro, aaronpk, cwebber, bengo
#
Zakim
... dwhly, bigbluehat, bitbear, ElijahLynn, tsyesika, Loqi, strugee, aaronpk, wseltzer, sandro, trackbot
#
Zakim
On IRC I see bengo, akuckartz, Zakim, RRSAgent, KevinMarks2, annbass, tantek, jasnell_, Arnaud, jet, cwebber2, KevinMarks, ben_thatmustbeme, rrika, rhiaro, wilkie, raucao, pdurbin,
#
annbass
chair: tantek
#
annbass
approval of minutes from F2F and last week's meeting
#
annbass
F2F was 6-6 and 6-7, but first day minutes were already approved
#
annbass
this vote is for 6-7
#
tsyesika
present+
#
annbass
tantek clarifying when resolved to take micropub to CR
#
annbass
aaronpk: we did that last week
#
rhiaro
We checked the mintues but we basically just screwed up the wording of the proposal
#
aaronpk
that wasn't me
#
annbass
<discussion and clarification>
#
aaronpk
ugh having more audio issues. trying again.
#
annbass
oh .. sorry.. if not aaronpk, then who?
#
annbass
tantek: any other questions or issues?
#
bengo
+1
#
annbass
vote to approve ..
#
annbass
minutes approved
#
annbass
next: minutes from 6/21 meeting...
#
annbass
(last week)
shepazu joined the channel
#
annbass
waves at shepazu
#
bengo
+1
#
rhiaro
just made agenda update
#
annbass
minutes approved
#
rhiaro
.. everyone please refresh
#
annbass
Topics: AS2 and Micropub transitions
#
annbass
sandro: people are slow...
#
annbass
... I need to send transition request emails out tomorrow morning at latest
#
annbass
tantek: wou ld it help if we tracked the outstanding items?
#
annbass
sandro: not sure that'd help
#
annbass
... no actions for group;
#
annbass
... aaronpk, hold off on formatting if you can and please respond promptly if I ping you in next few hours
#
annbass
tantek: for the record, seeking publication date of 7/7 or 7/12
#
annbass
... ok, the date is pending;
#
annbass
... waiting for some info from Evan (who sent regrets for today)
#
annbass
Topic: JS2 and Post Type Discovery
#
annbass
... short names approved and publication request approved
#
annbass
... editors need to process HTML output into proper location
#
annbass
... (manual process)
#
annbass
sandro: helpful if it could be done today
#
tantek
zakim, who is here?
#
Zakim
Present: sandro, annbass, tantek, akuckartz, rhiaro, aaronpk, cwebber, bengo, tsyesika, !
#
Zakim
On IRC I see shepazu, bengo, akuckartz, Zakim, RRSAgent, KevinMarks2, annbass, tantek, jasnell_, Arnaud, jet, cwebber2, KevinMarks, ben_thatmustbeme, rrika, rhiaro, wilkie, raucao,
#
Zakim
... pdurbin, dwhly, bigbluehat, bitbear, ElijahLynn, tsyesika, Loqi, strugee, aaronpk, wseltzer, sandro, trackbot
#
annbass
tantek: I can do that for Post Type Discovery
#
annbass
... is Ben Roberts (benthatmustbeme) here?
#
annbass
... no
#
annbass
... for JS2
#
rhiaro
s/JS2/jf2
#
annbass
... let's aim for 7/30 publication date
#
ben_thatmustbeme
can hear only, conference room is ocupied,
#
tantek
s/7/6
#
annbass
... date should be 6/30
#
ben_thatmustbeme
annbass probably just escapte the / as \/ s/7\/30/6\/30/
#
annbass
thanks
#
annbass
tantek: asking ben what needs to be done
#
ben_thatmustbeme
okay, i have them passing tests, its just i need to finish up one minor piece
#
ben_thatmustbeme
and yes, today I should be able to do that
#
annbass
tantek:; OK, thanks
#
tantek
Topic: Follow up on AS2 closed issues labelled 'waiting for commenter'
#
annbass
rhiaro gets massive kudos for contacting all commenters!
#
bengo
rhiaro++
#
Loqi
rhiaro has 208 karma
#
annbass
rhiaro++
#
Loqi
rhiaro has 209 karma
#
annbass
rhiaro: contacted everyone via email; gave them a deadline of today
#
annbass
... bunch of no replies; those are presumed to be time-outs
#
annbass
... dret (Erik Wilde) had one hesitation
#
annbass
... wonders if we should give a little more time
#
annbass
sandro: technically one week left
#
annbass
rhiaro: could use help finding email address for 3 people she couldn't find
#
KevinMarks
if only you could webmention them
#
annbass
sandro: issue 284 ... <that person> didn't actually raise the issue, KevinMarks did
#
KevinMarks
I'll have a look
#
KevinMarks
I copied it in
#
annbass
tantek: (clarifying) .. external comment, that KevinMarks brought into github?
#
annbass
<discussion about who gets contacted when there's discussion on github... opinions that is definitely not a reliable way for people to be informed>
#
ben_thatmustbeme
rhiaro, annando is pretty active on github, but we can try in #friendica on freenode to see if anyone has contact info there
#
annbass
KevinMarks: I'll try to get in contact with <that person>
#
KevinMarks
Cathal Garvey
#
rhiaro
@ cathalgarvey
#
annbass
thanks
#
KevinMarks
hm, quitter.no is down
#
annbass
sandro: just found email for one of them .. will send to rhiaro
#
annbass
rhiaro: next issue .. <something> .. jasnell and Evan aren't here today .. need their inputs
#
annbass
bengo: explains
#
annbass
(would be helpful if bengo could put a small summary in IRC)
#
annbass
tantek: sounds like an editorial fix ... true?
#
annbass
bengo: yes
#
annbass
tantek: functionality was already there, but not adequately described .. this improves understanding
#
bengo
It explicitly lists the 'id' property as being allowed on Link object in core.
#
annbass
... asks sandro if we can make editorial fixes after CR
#
annbass
sandro: yes, we can
#
annbass
tantek: <clarifying timing on when the fix is made, and when it will show up>
#
annbass
... if it's not a normative change, group can choose to make the change before CR
#
annbass
... asks rhiaro if she has opinion / ditto Ben
#
annbass
rhiaro: don't care
#
annbass
ben_thatmustbeme: see if we can make change before CR
#
annbass
is that right, Ben?
#
tantek
PROPOSED: Accept editorial change from bengo to AS2 in pull request https://github.com/w3c/activitystreams/pull/329 pending spec editor approval with the intent of making this fix for CR.
#
annbass
sheesh ..
#
ben_thatmustbeme
thats bengo that is talking now
#
bengo
:)
#
annbass
oh .. sorry
#
ben_thatmustbeme
s/ben_thatmustbeme/bengo/
#
bengo
+1
#
annbass
thanks
#
rhiaro
bengo++ for PR
#
Loqi
bengo has 16 karma
#
annbass
tantek: resolved
#
tantek
RESOLVED: Accept editorial change from bengo to AS2 in pull request https://github.com/w3c/activitystreams/pull/329 pending spec editor approval with the intent of making this fix for CR.
#
annbass
rhiaro: 2 issues raised by dret (Erik Wilde)
#
annbass
... one closed
#
annbass
... the other is an editorial change, but it's significant
#
annbass
... he notes he has not seen a good explanation of why this change shouldn't be made
#
annbass
... but he'll approve if the group has decided not to do it
#
annbass
tantek: requires addition of non-trivial text?
#
annbass
rhiaro: yes, I might be over-thinking it, but it's about how media type is explained
#
annbass
... would be really helpful if dret could join the call and explain more
#
annbass
sandro: given that the tight timing, and IF it is only editorial, then we could do that after CR
#
akuckartz
I do not think it is only editorial
#
annbass
rhiaro: I understand it's only editorial, but there are a lot of threads, so need to clarify
#
annbass
annbass: could dret propose some new language?
#
annbass
sandro: problem is, we don't have time
#
annbass
tantek: asking akuckartz for clarification
#
annbass
<sorry, I can't hear him>
#
rhiaro
since you're here akuckartz did you manage to get to https://lists.w3.org/Archives/Public/public-socialweb/2016Jun/0080.html or are you letting us time those out?
#
annbass
turned up my speaker
#
annbass
akuckartz: I think this is important, but I don't want to hold up CR process
#
ben_thatmustbeme
i think it COULD be resolved as editorial
#
ben_thatmustbeme
or as non-editorial
#
annbass
tantek: we can still proceed .. but, if you end up thinking this is a serious implementation issue, you can block it .. then we would resolve the issue and can work toward a new CR
#
annbass
akuckartz: that's OK with me
#
annbass
tantek: resolve per this conversation, this is OK with akuckartz and dret .. and if they decide later this is significant, we will work to resolve and issue a new CR
#
rhiaro
My wifi dropped, reconnecting to everything
#
annbass
tantek: notes that any objectors can file a new issue, which we can link back to this discussion
#
sandro
fwiw, reading over the issue, it looks editorial to me. Dret doesnt want to use profile.
#
annbass
tantek: clarifying this is true for anyone and all issues ..
#
annbass
<waiting for rhiaro to get reconnected>
#
ben_thatmustbeme
i didn't hear her rejoin
#
sandro
( in https://github.com/w3c/activitystreams/issues/53#issuecomment-62921081 he says, ""that would be against the intention of the profile parameter)
#
tantek
Topic: Authentication/Authorization decisions
#
cwebber2
I raised it
#
annbass
tantek: we'll proceed and then get back to AS2 when rhiaro reconnects
#
rhiaro
keeps dropping sorry
#
sandro
we're not hearing Chris
#
ben_thatmustbeme
cwebber2 we cannot hear you
#
sandro
tantek, agenda+ Horizontal Reviews
#
Zakim
sees aaronpk on the speaker queue
#
annbass
cwebber2: I raised this issue bcuz I was implementing ActivityPub .. realized this was a hole .. we originally said this was out-of-scope, but then I worried re: what this will really mean for implementers
#
annbass
... various options IndieAuth or OAuth or ...
#
annbass
... do we need more specificity?
#
tantek
s/or OAuth/as one possible way of doing OAuth2 with bearer tokens
#
Zakim
sees aaronpk on the speaker queue
#
KevinMarks
micropub uses indieauth; webmention doesn't need auth
#
Zakim
sees aaronpk, sandro on the speaker queue
#
rhiaro
aaand back
#
annbass
... I don't understand details of some of the proposed solutions; need more info; seems like a hole and not sure what to do
#
ben_thatmustbeme
annbass if you want i can take over minuting
#
annbass
tantek: for context: last time this question was asked ..
#
annbass
oK, would be great
#
ben_thatmustbeme
scribenick: ben_thatmustbeme
#
ben_thatmustbeme
tantek: back at f2f at MIT we came to an agreement that we would refer to oauth 2 with barer tokens and we would leave it at that
#
ben_thatmustbeme
sorry, was switching scribes so we can get more in
#
ben_thatmustbeme
tantek: a reasonable summary from cwebber is that that is insufficient
#
ben_thatmustbeme
cwebber2: thats issues 1
#
tantek
s/insufficient/insufficient to achieve interoperability
#
ben_thatmustbeme
... issue 2 is, for micropub we list indieauth as a SHOULD (i think)
#
Zakim
sees aaronpk, sandro on the speaker queue
#
ben_thatmustbeme
... is that okay for the group?
#
bengo
IMO it's good for these specs to say "The Server should explain it's authorization requirements via WWW-Authenticate response header" https://tools.ietf.org/html/rfc6750#section-3
#
tantek
ack aaronpk
#
Zakim
sees sandro on the speaker queue
#
ben_thatmustbeme
aaronpk: the reason that we decided oauth2 with barer tokens is acceptable is because it lets us avoid complicating these issues and these calls
#
ben_thatmustbeme
... in stark contrast to oauth 1 with ties requests to authentication
#
ben_thatmustbeme
... if you forget everything you know about oauth1, 2.0 becomes much easier
#
ben_thatmustbeme
... the important part is that it describes how to get a token. if both of these specs accept tokens, we don't really care how you get that token
#
ben_thatmustbeme
... as cwebber2 found, there are not really great solutions for that in desktop apps and hardward devices, they can still use the spec, but they just need a token in some way
#
cwebber2
that's helpful, thanks aaronpk
#
bengo
q+
#
Zakim
sees sandro, bengo on the speaker queue
#
ben_thatmustbeme
... there isn't a good industry standard on that, so the best way for that is to just say 'use barer tokens' and it can be anything, oath2, indieauth, etc.
#
KevinMarks
a lot of oauth2 is documenting possible ways to get tokens
#
ben_thatmustbeme
tantek: it sounds like, you are saying that one way to get a token is indieauth, that sounds like an informative note rather than normative
#
cwebber2
I think right now micropub says "SHOULD" on indieauth
#
rhiaro
Me too re: hardcoding/copypasting tokens
#
ben_thatmustbeme
aaronpk: i will say that some of my implementations do not use indieauth, i just copy and paste, and thats a perfectly acceptable method
#
cwebber2
but I suspect it can be easily changed
#
Zakim
sees sandro, bengo on the speaker queue
#
tantek
ack sandro
#
Zakim
sees bengo on the speaker queue
#
ben_thatmustbeme
tantek: i think this avoids any issue of the stability of indieauth
#
ben_thatmustbeme
sandro: basically i agree, at some ponit somebody will come along with a better way to do authentication (i hope)
#
ben_thatmustbeme
sandro: will the specs need to be rewritten or not? i think the answer is not.
#
bengo
q-
#
Zakim
sees no one on the speaker queue
#
ben_thatmustbeme
... its a little bit frustrating when implementing, but thats reality
#
bengo
q+
#
Zakim
sees bengo on the speaker queue
#
ben_thatmustbeme
tantek: it sounds like the state of the industry is messy no matter what we say
#
Zakim
sees bengo on the speaker queue
#
tantek
ack ben_thatmustbeme
#
Zakim
sees bengo on the speaker queue
#
tantek
ack bengo
#
Zakim
sees no one on the speaker queue
#
ben_thatmustbeme
bengo: as far as the state of the industry is messy, in the last year or two there has been a lot of acceptance of oauth2. they have had a lot of implementations from <lists a bunch>
#
Zakim
sees aaronpk on the speaker queue
#
Zakim
sees aaronpk on the speaker queue
#
cwebber2
bengo, I've been looking at openid connect, I guess I got a bit overwhelmed because it looked like "layer on top of oauth 2". If you have a resource that's like "here's how to implement a bunch and *ignore* a lot of the huge set of options" would help me feel less overwhelmed :)
#
ben_thatmustbeme
... oauth2 barer tokens is compatable with that. saying "use barer tokens" is pretty generic, and it lets you use any string at all really
#
cwebber2
interesting
#
tantek
ack aaronpk
#
Zakim
sees no one on the speaker queue
#
cwebber2
I'm ok with requireing a response that's informative
#
ben_thatmustbeme
... it could be a little more useful to have an error header to give hints on what is needed for getting that token
#
ben_thatmustbeme
aaronpk: oauth2 does have a header response for when a request requires a token. I agree the server needs a way to say they need a token. The token is opaque, and it is good that way. its up to the server and client to negotiate that. you don't need that in the spec because thats an implementation detail
#
ben_thatmustbeme
... its just saying, the client willg et a string, the client should not try to interpret that string
#
Zakim
sees no one on the speaker queue
#
ben_thatmustbeme
tantek: cwebber2 you originally raised this, is this enough for you to follow up?
#
ben_thatmustbeme
cwebber2: i think so, i certainly feel like anything useful that could be said on this call has already been said and i can get more info and work on an issue for that
#
ben_thatmustbeme
tantek: its probably good to record an issue to them to clarify
#
ben_thatmustbeme
tantek: anything else for that item?
#
ben_thatmustbeme
cwebber2: no
#
Zakim
sees no one on the speaker queue
#
annbass
ben .. you wanna continue?
#
ben_thatmustbeme
tantek did we want to go back to rhiaro?
#
rhiaro
I'm done, thanks ben_thatmustbeme
#
ben_thatmustbeme
annbass i'm good
#
annbass
cool beans
#
rhiaro
... unless akuckartz wants to follow up on his issues 85 & 86
#
ben_thatmustbeme
aaronpk: the person wants to only have a media endpoint
#
ben_thatmustbeme
... is this something we should do now or something we can do in CR
#
ben_thatmustbeme
sandro: we should do it now, as its not editorial right?
#
ben_thatmustbeme
aaronpk: it changes the conformance section
#
ben_thatmustbeme
tantek: the request is to make it optional?
#
ben_thatmustbeme
aaronpk: yes, make the direct uploads optional if there is a media endpoint
#
ben_thatmustbeme
sandro: only if there is a media server
#
ben_thatmustbeme
tantek: your options are to make it optional, or mark it at risk and dropping it in CR
#
ben_thatmustbeme
... have you thought about this enough to put forth a specific proposal
#
ben_thatmustbeme
... you can mark it optional AND at risk as well
#
ben_thatmustbeme
aaronpk: the text that would need to change is in the conformance classes section which is .... actually now i'm not seeing that there.
#
ben_thatmustbeme
... shoot ... (talks to self a little)
#
ben_thatmustbeme
sandro: technically we could wait until next week to solve this, even if we get it staged and approval, we could change it
#
ben_thatmustbeme
... send an email to the list as soon as you have some clarity to what you want to do here
#
ben_thatmustbeme
tantek: even better, if you are able to follow up with a PR that the person is ok with, that makes it clear we processed the issue before CR
#
ben_thatmustbeme
tantek: are there any at risk features in the current draft?
#
ben_thatmustbeme
aaronpk: i don't think so, the update and delete we implemented
#
ben_thatmustbeme
tantek: we had only one more explicity item
#
ben_thatmustbeme
aaronpk: i just wanted to drop links in
#
ben_thatmustbeme
sandro: you probably all saw a bunch of emails about getting replies from other groups
#
ben_thatmustbeme
... two groups replied saying they don't have much time, but there was a response with the security and privacy self review
#
ben_thatmustbeme
aaronpk: there was another for internationalization
#
ben_thatmustbeme
<ben_thatmustbeme> i remember looking over the internationalization one before, i think we discussed some time ago
#
ben_thatmustbeme
tantek: sandro, can you make sure the issues get filed for these
#
Zakim
sees no one on the speaker queue
#
ben_thatmustbeme
... the response from the other groups was to get these questionaires filled out
#
ben_thatmustbeme
... they may cause changes later
#
ben_thatmustbeme
tantek: thanks everyone, next week, usual time, chair will be evan
#
annbass
ben .. you want to make the minutes and copy them out there, or shall I?
#
aaronpk
fyi I did a talk at open source bridge last week summarizing the work this group is doing
#
annbass
that'll be interesting, aaronpk, thanks
#
aaronpk
feel free to use the slides for your own presentations later!
#
aaronpk
and hopefully i accurately represented things here!
#
ben_thatmustbeme
trackbot, end meeting
#
trackbot
is ending a teleconference.
#
trackbot
Zakim, list attendees
#
Zakim
As of this point the attendees have been sandro, annbass, tantek, akuckartz, rhiaro, aaronpk, cwebber, bengo, tsyesika, !, ben_thatmustbeme
#
trackbot
RRSAgent, please draft minutes
#
RRSAgent
I have made the request to generate http://www.w3.org/2016/06/28-social-minutes.html trackbot
#
trackbot
RRSAgent, bye
#
RRSAgent
I see no action items
#
tantek
sees ben_thatmustbeme is angling to apply to be a chair ;)
#
Zakim
leaving. As of this point the attendees have been sandro, annbass, tantek, akuckartz, rhiaro, aaronpk, cwebber, bengo, tsyesika, !, ben_thatmustbeme
#
ben_thatmustbeme
haha, tantek, don't you have to be a full member for that?
#
annbass
for which?
#
tantek
ben_thatmustbeme: you do not. chairs are chosen by w3c team
#
tantek
usually among members, but sometimes invited experts too
#
annbass
I'm a chair of another group, Ben, and I'm not a member
#
annbass
as Tantek says, you must be nominated and approved
#
ben_thatmustbeme
aaronpk: is loqi still not informing of wiki edits in here
#
ben_thatmustbeme
thought it would be in by now
#
rhiaro
A coulpe of days ago I got a 24 hour lag on loqi posting a wiki edit here
#
aaronpk
ben_thatmustbeme: for some reason it started grouping them and after like 24 hours
#
aaronpk
yeah, haven't looked into it
#
aaronpk
weird, i think they added some caching
#
aaronpk
in my browser i get results, but it's empty when I run it from Loqi's server
#
ben_thatmustbeme
aaronpk: its not caching, curl does the same
shepazu joined the channel
#
aaronpk
huh, it's not even user agent sniffing
#
ben_thatmustbeme
nope, wget fetches it fine, curl does not
#
ben_thatmustbeme
so some other header
#
aaronpk
well if you can figure out the header i'll add it to Loqi
Arnaud, tantek_ and tantek joined the channel
#
ben_thatmustbeme
aaronpk: change the |'s to %7C
#
aaronpk
haha whoa
#
aaronpk
done. should pick it up in 4 minutes
#
ben_thatmustbeme
i spent FAR too long on that
#
aaronpk
thx :)
#
Loqi
does a happy dance!
#
ben_thatmustbeme
rhiaro: i wonder if people might have an issue with the fact that you just published their emails publicly on the archives?
#
ben_thatmustbeme
s/emails/email addresses/
#
rhiaro
you mean the mail archives?
Arnaud joined the channel
#
ben_thatmustbeme
i wonder if that should really be considered a bug actually. if you send to the mailing list it asks you to confirm that it can publish your email address and content, but if you sent to someone it publishes their email address publicly.... unless they both happen to have agreed to it already
#
ben_thatmustbeme
sandro, just waiting on pubrules to come back up. barring any other fixes anyone spots
#
ben_thatmustbeme
oh, it looks like i have to take out the link to bengo.is which is down right now
#
sandro
If bengo.is is only down temporarily, we can tell them to make an exception.
#
ben_thatmustbeme
it was up just a few days ago, so i'm assuming temporary
#
ben_thatmustbeme
since its ben's homepage, i'm pretty sure thats the case
#
sandro
we should actually get him to confirm it... or take it out.
#
ben_thatmustbeme
agreed, i was hoping he would be on, but i figure we have some time until i can actually verify that all the pubrules pass
shepazu joined the channel
#
sandro
ben_thatmustbeme, turns out we can't publish this week.
jasnell, tantek and Arnaud joined the channel