My immediate assumption is **yes, it can**, because someone may use a specific domain merely as a gateway, and point to a different domain for resolution.
-
@julian@activitypub.space Here's what Takahē has to say on the subject: https://docs.jointakahe.org/en/latest/domains/
Even they don't go all the way, they “only” let server admins add a selection of WebFinger domains for users to choose from.
So what if we put a “handle domain” field into people's account settings, let them enter whatever they want, and on submission we test whether that domain's WebFinger query for the username in question returns a valid result pointing back to our local actor?
I honestly think this would work.
@julian@fietkau.social yes I agree, I think this would work too. The hard part is having the Webfinger endpoint set up on the other hostname.
It's a bit technical for just anybody to do it, but I could conceivably see a simple nginx config set up to serve just one record.....
-
@julian@activitypub.space I haven't fully thought through the ramifications, but it would be slightly simpler (for situations other than mere static file hosting) to ask the WebFinger domain owner to set up an HTTP redirect for /.well-known/webfinger back to the ActivityPub server. The ActivityPub server could then do an ACME-like (as in Let's Encrypt) challenge to check that this redirect is in place, and if so, proceed to serve the correct WebFinger payload itself.
-
@mkljczk Hmm, true! Is that something a setup like this would run into? I would think the name part of the handle would still be fully governed by the ActivityPub server, which could enforce its own uniqueness constraints.
-
@julian@activitypub.space I haven't fully thought through the ramifications, but it would be slightly simpler (for situations other than mere static file hosting) to ask the WebFinger domain owner to set up an HTTP redirect for /.well-known/webfinger back to the ActivityPub server. The ActivityPub server could then do an ACME-like (as in Let's Encrypt) challenge to check that this redirect is in place, and if so, proceed to serve the correct WebFinger payload itself.
@julian@activitypub.space Yo @by_caballero if I recall correctly this was a passion topic of yours, check out this fun thread!
-
@julian You're not wrong -- it's just generally not considered "authoritative".
Compare to DNS via the authoritative nameserver, versus DNS via a public resolver. dns:trwnh.com is different than dns://8.8.8.8/trwnh.com in that the latter is explicitly resolved via Google, or dns://1.1.1.1/trwnh.com to resolve via Cloudflare.
-
@julian You're not wrong -- it's just generally not considered "authoritative".
Compare to DNS via the authoritative nameserver, versus DNS via a public resolver. dns:trwnh.com is different than dns://8.8.8.8/trwnh.com in that the latter is explicitly resolved via Google, or dns://1.1.1.1/trwnh.com to resolve via Cloudflare.
@julian If you want to be fully accurate, you can consider my "WebFinger ID" to not be trwnh@mastodon.social or acct:trwnh@mastodon.social but rather https://mastodon.social/.well-known/webfinger?resource=acct:trwnh@mastodon.social (which is linked to https://mastodon.social/users/trwnh via rel=self)
-
@julian@activitypub.space @julian@fietkau.social thanks, most of the computing I do is numerical so as much as I try to keep up with how fedi works it's just not part of my day to day thought process and it's very educational to see threads like this one!
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login