ActivityPub API Client Reputation
Technical Discussion
3
Posts
3
Posters
0
Views
-
For the ActivityPub API Task Force, I started an issue to discuss OAuth client reputation systems.
A reputation system tracks which OAuth clients are known good, known bad, or unknown. Servers could use this information to limit what clients can do. For example, a server could prevent users from logging in with a known bad client.
The reputation could be based on human curation and review, or on automated collection of evidence from historical behaviour of the client.
I'm trying to find examples in the OAuth ecosystem of this kind of reputation systems -- either local or distributed.
App store approval (and user reviews) are a good example for native apps. OpenBanking keeps a client directory that needs human curation and review.
I don't have examples from OAuth -- especially with dynamic registration or CIMD.
Any ideas?
-
undefined evan@cosocial.ca shared this topic
-
@evan@activitypub.space I want to take a moment to note how nice the NodeBB content looks in Mastodon.
-
@evan what factors would impact the reputation and who decides what is a good or bad client?
Gli ultimi otto messaggi ricevuti dalla Federazione
-
@evan brilliant!
-
@evan what factors would impact the reputation and who decides what is a good or bad client?
-
@evan@activitypub.space I want to take a moment to note how nice the NodeBB content looks in Mastodon.
-
For the ActivityPub API Task Force, I started an issue to discuss OAuth client reputation systems.
A reputation system tracks which OAuth clients are known good, known bad, or unknown. Servers could use this information to limit what clients can do. For example, a server could prevent users from logging in with a known bad client.
The reputation could be based on human curation and review, or on automated collection of evidence from historical behaviour of the client.
I'm trying to find examples in the OAuth ecosystem of this kind of reputation systems -- either local or distributed.
App store approval (and user reviews) are a good example for native apps. OpenBanking keeps a client directory that needs human curation and review.
I don't have examples from OAuth -- especially with dynamic registration or CIMD.
Any ideas?
-
@evan sorry I missed the meeting! Sounds like something right up my alley on what to work on next.
Thanks for sharing the link.
-
This topic came up yesterday during the SocialCG meeting. I think it's really interesting as a way to interact naturally with remote servers; see Cross-server Interactions in ActivityPub for a description of how it can work.
There was some discussion during the call, so I started an issue in the ActivityPub API task force issue list: Using the ActivityPub API for cross-server interactions.
-
@box464 Piefed's gallery view is the closest approximation I know of.
Pinetta was more directly focused trying to be a Pinboard alternative hasn't been updated in a couple of years.
-
@julian@fietkau.social that's a great idea! I should adopt that, there's no downside.
