@hotelbreakfast@mastodon.social standards? No let's make something new for no reason other than to make something new <img class="not-responsive emoji" src="https://activitypub.space/assets/plugins/nodebb-plugin-emoji/emoji/android/1f606.png?v=faddfb1abda" title="" />

Yes, this is normal and good.

@silverpill I think I'll make it configurable.

Finally got to the point where I've started implementing integration testing for the side effects of Add/Move and Remove activities received through the client to server ActivityPub API. #activityPub #activitypubDev #fedidev

Latest Bonfire Social build shows a nifty diagram of users that are part of a post thread and how engaged they are. Do I need it for my own lame posts about my dog? Not really, but interesting!#FediDev #FediApp #Bonfire

@silverpill @technical-discussion Ah whoops. Thank you.I'll update the FEP to add an `id`, and the `actor ` can be the instance actor...? That's probably fine, since most software already has an instance actor anyway.

@silverpill @julian In addition, more particularly, it appeared highly unlikely that Mastodon would ever implement something first implemented in the "Anti-Mastodons". The Fediverse server applications that are the farthest from Mastodon while still largely being capable of the same things as Mastodon. Mastodon's nemeses, so-to-speak. The stuff created by the guy who speaks out the most radically against what Mastodon does.#FediMeta #FediverseMeta #CWFediMeta #CWFediverseMeta

@lime360 you have it running anywhere?

@maddyunderstars- FEP-0499: Delivering to multiple inboxes with a multibox endpoint (not about batching but could be repurposed for that)- FEP-1a11: Send Announces Containing Many Activities (batching for FEP-1b12 applications)- FEP-3ab2: ActivityPub Event Streaming API (this is for clients but might contain some interesting ideas)

@dusoft Thank you

I will say that adoption of RFC 9421 is a more difficult than anticipated because many of us hacked our cavage-12 implementations in by testing against Mastodon. Specifically, I remember a very old (and outdated even then!) blog post by @gargron@mastodon.social about how Signatures were implemented by Mastodon, and that formed the basis of how NodeBB signed its messages. I'm glad we're moving on but I think for the majority of us, having a reliable library to do the heavy lifting is important. Don't roll your own HTTP signatures folks!

@bms @wachoperro @apps Friends, don't fight. Thank you all for your attention and for sharing your knowledge. I tested Matrix, went through the code, and haven't found any dangerous actions in it so far. I was at a crossroads – Signal or Matrix – but Signal ended up in the spotlight due to a mistake made through FCM push notifications, namely that they were able to extract data via Firebase Cloud Messaging and hand it over to the court. That's why I chose Matrix, but on my end, I also closed those holes so that the notification body isn't transmitted to FCM during push.Of course, the best solution is always the one you develop yourself, but there are plenty of pitfalls there too. For example, today I found 6 vulnerabilities in an app that has been downloaded over 5 million times. I wrote an article about it today without disclosing the app's data to avoid causing harm, and I notified the developers. I'm not falling apart here – I'm just saying that even giant apps often make mistakes, sometimes critical ones – like an exposed API key from a database in decompiled code.Wishing everyone security, success, and peace. And forgive me for writing to you from an account where I have a bot agent running – so if you'd like, we can exchange subscriptions from my active account, where I write personally rather than the OSINT bot. == @newsgroup

I wrote up some recommendations about implementing paginated collections. https://ghost.evanp.me/implementing-pagination-for-activitypub-collections/ tl;dr (read the full article for the whys): Have big pages – 128 or 256 items per page. Inline the items for small collections. If you're already using offset pagination, change to cursor pagination ASAP. If you're implementing from scratch, consider using bucket pagination.

@mbajur@prismo.zip mention test @prismo

@fentiger just btw; I hope, all of this will make my IndieWebCamp Brighton demo of broken registerProtocolHandlers obsolete https://www.youtube.com/live/W70wd56i0Bg?t=2030s@jaffathecake Once I had BrowserId then the renamed Persona then WebId and now it is https://developer.mozilla.org/de/docs/Web/API/FedCM_API I suppose.Demos https://fedcm-demo-rp.dev/menu Some articles said that Firefox will ship it in 2025 / 2026 - is that still true ?#indieweb #indieauth #activitypub #federation #oauth

@Mastodon i think this is pretty badthats like if ubuntu could decide what specific computers you can install it on, and the manufacturer (be it a company or someone building his own pc) would need to ask canonical for permission to install their operating system in that computeridk... but for an alternative to big tech, asking one big corporation for permission to use the name of the software it runs on really seems like the first step into becoming the next big tech to avoid

@spraoi @Interledger well, it's complicated. Yes, Fediverse servers often use an old version, draft-cavage-12. But a lot of the big and new implementations implement both, including Mastodon. I think in the next year or so, it'd be possible to support only RFC 9421.

@mapache@hachyderm.io yeah I agree with this, additional test suites would have made it easier to get it working for me too, way back.

Hi @haubles@hachyderm.io — is this for chat or group discussions?

@elliek @jamie @StevenKennard ooh this one is really good too