“All a ‘true ActivityPub server’ is for is storing data, fanning out subscriptions and collecting incoming data for you to view.
General Discussion
20
Posts
8
Posters
55
Views
-
There are good reasons for the work being on the servers. They are just not explained / ignored in the ActivityPub specification documents.
The reason is roughly: The data model of ActivityPub has no integrity mechanism. This is patched by requiring users to trust their origin server and servers communicating through signed messages.
@helge interesting: this is a little over my head so could you tell me a bit more? Do you mean at the level of "the server can impersonate any of its users and make them say whatever it wants" or also at the schema level somehow?
I suppose the server impersonation thing is a potential issue and would need some kind of keys/signing to solve, but I can''t see how that relates to tighter or looser coupling between client and server 👀
-
@helge interesting: this is a little over my head so could you tell me a bit more? Do you mean at the level of "the server can impersonate any of its users and make them say whatever it wants" or also at the schema level somehow?
I suppose the server impersonation thing is a potential issue and would need some kind of keys/signing to solve, but I can''t see how that relates to tighter or looser coupling between client and server 👀
I'm talking here about the Fediverse and my experience with it (including ActivityPub).
Due to the data model: A server needs to store / understand all the data owned by the server. This is due to
- the nature of ActivityPub objects being fetchable by their id (a HTTPS uri).
- people often expecting a HTML version if they click on the object
This means all outgoing stuff needs to be tracked and understood by the server! Due to the desire of coordinating replies / like counts / etc ... the server also needs to understand the incoming traffic.
-
I'm talking here about the Fediverse and my experience with it (including ActivityPub).
Due to the data model: A server needs to store / understand all the data owned by the server. This is due to
- the nature of ActivityPub objects being fetchable by their id (a HTTPS uri).
- people often expecting a HTML version if they click on the object
This means all outgoing stuff needs to be tracked and understood by the server! Due to the desire of coordinating replies / like counts / etc ... the server also needs to understand the incoming traffic.
@helge @badrihippo Having tried to build a generic ActivityPub server, I can confirm: this is very difficult, maybe impossible. The server needs to understand the payloads -- in order to generate collections, for example. And security implications of allowing arbitrary activities are not quite clear.
However, I think a modified version of ActivityPub protocol could support generic servers.
-
@helge @badrihippo Having tried to build a generic ActivityPub server, I can confirm: this is very difficult, maybe impossible. The server needs to understand the payloads -- in order to generate collections, for example. And security implications of allowing arbitrary activities are not quite clear.
However, I think a modified version of ActivityPub protocol could support generic servers.
silverpill@mitra.social helge@mymath.rocks theoretically it is possible to reduce down any activities your software doesn't understand into a "generic" presentation — it likely needn't be user facing. Though I do think at that point you'd need to save the original AS payload for future processing, potentially.
Realistically I would probably expect implementors to support only their subset of activities and objects. It falls short of the ideal, though the ideal is well worth shooting for.
-
@helge @badrihippo Having tried to build a generic ActivityPub server, I can confirm: this is very difficult, maybe impossible. The server needs to understand the payloads -- in order to generate collections, for example. And security implications of allowing arbitrary activities are not quite clear.
However, I think a modified version of ActivityPub protocol could support generic servers.
@silverpill @helge @badrihippo
Do you have a sense of what you feel would need to be modified with ActivityPub to make it work?
-
@silverpill @helge @badrihippo
Do you have a sense of what you feel would need to be modified with ActivityPub to make it work?
@reiver @silverpill @helge @badrihippo
@zoul I really want a generic server. In that case I would have to start developing one of my own?
A generic server that has support to Mastodon, Lemmy and Peertube API would be awesome
-
System shared this topic on
-
@silverpill @helge @badrihippo
Do you have a sense of what you feel would need to be modified with ActivityPub to make it work?
@reiver @silverpill @helge @badrihippo
@julian@activitypub.space @julian@community.nodebb.org
@by_caballerofull ack.
We are working heavily towards a generic server and in deed it is super important what Helge decribes but anyway, we need to come together.original:
„the client APIs necessary to make this a reality haven't seen much development“But many people want this.
We should change that now and meet.
After organizing the first official Confs https://conf.tube/c/apconf_channel/videos (tons of videos) I advised the EU for DMA and DSA and then Client To Server was eye-opening for them.My last Talks (e.g. together with funder at fediday) and those after had been in German but when we showed the AP Client2Server boardgame at Public Spaces it was english https://video.publicspaces.net/w/9USsJ37cHVy4tY9Pn7DX2X :)
So, if anyone is interested in a nice dev. meeting about this topic apart from the new taskforces, please comment here !
-
@reiver @silverpill @helge @badrihippo
@julian@activitypub.space @julian@community.nodebb.org
@by_caballerofull ack.
We are working heavily towards a generic server and in deed it is super important what Helge decribes but anyway, we need to come together.original:
„the client APIs necessary to make this a reality haven't seen much development“But many people want this.
We should change that now and meet.
After organizing the first official Confs https://conf.tube/c/apconf_channel/videos (tons of videos) I advised the EU for DMA and DSA and then Client To Server was eye-opening for them.My last Talks (e.g. together with funder at fediday) and those after had been in German but when we showed the AP Client2Server boardgame at Public Spaces it was english https://video.publicspaces.net/w/9USsJ37cHVy4tY9Pn7DX2X :)
So, if anyone is interested in a nice dev. meeting about this topic apart from the new taskforces, please comment here !
I am happy to do a video call with anyone interested. (Assuming that is what you were suggesting.)
We would just need to figure out a day and time for it.
cc: @silverpill @helge @badrihippo @julian@activitypub.space @julian@community.nodebb.org @by_caballero
-
I am happy to do a video call with anyone interested. (Assuming that is what you were suggesting.)
We would just need to figure out a day and time for it.
cc: @silverpill @helge @badrihippo @julian@activitypub.space @julian@community.nodebb.org @by_caballero
@reiver @silverpill @helge @badrihippo @julian@activitypub.space @julian@community.nodebb.org @by_caballero
very nice, that was my suggestion.
I am just coding all day and so I'm very flexible. -
@reiver @silverpill @helge @badrihippo @julian@activitypub.space @julian@community.nodebb.org @by_caballero
very nice, that was my suggestion.
I am just coding all day and so I'm very flexible.What time-zone are you in?
cc: @silverpill @helge @badrihippo @julian@activitypub.space @julian@community.nodebb.org @by_caballero
-
What time-zone are you in?
cc: @silverpill @helge @badrihippo @julian@activitypub.space @julian@community.nodebb.org @by_caballero
@reiver @silverpill @helge @badrihippo @julian@activitypub.space @julian@community.nodebb.org @by_caballero
Europe/Berlin
PS
according to the temporal polyfill and "Intl to ActivityPub" I wrote yesterday:
This Olson id is the same timezone like e.g. id: "DE-BE" or "DE" and can now be parsed from all localized names of the .Intl world – which is serverside polyfilled as well https://digitalcourage.social/@sl007/115275358490217223
¯\_(ツ)_/¯
At the moment it is summer in the EU which never implemented citizens demands or democracy results and so shifts are still in effect.
At the moment it is UTC+1
¯\_(ツ)_/¯ -
@reiver @silverpill @helge @badrihippo @julian@activitypub.space @julian@community.nodebb.org @by_caballero
Europe/Berlin
PS
according to the temporal polyfill and "Intl to ActivityPub" I wrote yesterday:
This Olson id is the same timezone like e.g. id: "DE-BE" or "DE" and can now be parsed from all localized names of the .Intl world – which is serverside polyfilled as well https://digitalcourage.social/@sl007/115275358490217223
¯\_(ツ)_/¯
At the moment it is summer in the EU which never implemented citizens demands or democracy results and so shifts are still in effect.
At the moment it is UTC+1
¯\_(ツ)_/¯I am away from home (on the west-coast Canada) right now — and I am currently in Korea.
So, I am in UTC+9 right now.
I think my very early morning (in Korea) is your late evening (in Germany).
Would you be able to do a video chat in your late evening?
cc: @silverpill @helge @badrihippo @julian@activitypub.space @julian@community.nodebb.org @by_caballero
-
I am away from home (on the west-coast Canada) right now — and I am currently in Korea.
So, I am in UTC+9 right now.
I think my very early morning (in Korea) is your late evening (in Germany).
Would you be able to do a video chat in your late evening?
cc: @silverpill @helge @badrihippo @julian@activitypub.space @julian@community.nodebb.org @by_caballero
@reiver @silverpill @helge @badrihippo @julian@activitypub.space @julian@community.nodebb.org @by_caballero
would be able.
just btw: If it is "South Korea", I recommend having coffee with https://toot.jeena.net/@jeena ;)
-
@reiver @silverpill @helge @badrihippo @julian@activitypub.space @julian@community.nodebb.org @by_caballero
would be able.
just btw: If it is "South Korea", I recommend having coffee with https://toot.jeena.net/@jeena ;)
I am in Korea right now. But where I am staying is far away from Seoul and Pangyo.
cc: @silverpill @helge @badrihippo @julian@activitypub.space @julian@community.nodebb.org @by_caballero @hongminhee
-
I am in Korea right now. But where I am staying is far away from Seoul and Pangyo.
cc: @silverpill @helge @badrihippo @julian@activitypub.space @julian@community.nodebb.org @by_caballero @hongminhee
How about doing the video chat on your Saturday evening?
(Which would be my Sunday morning.)
cc: @silverpill @helge @badrihippo @julian@activitypub.space @julian@community.nodebb.org @by_caballero @hongminhee
-
How about doing the video chat on your Saturday evening?
(Which would be my Sunday morning.)
cc: @silverpill @helge @badrihippo @julian@activitypub.space @julian@community.nodebb.org @by_caballero @hongminhee
@reiver @silverpill @helge @badrihippo @julian@activitypub.space @julian@community.nodebb.org @by_caballero @hongminhee
I would be fine. Is anyone else interested?
-
@reiver @silverpill @helge @badrihippo @julian@activitypub.space @julian@community.nodebb.org @by_caballero @hongminhee
I would be fine. Is anyone else interested?
sl007@digitalcourage.social unfortunately not free but interested in any minutes and outcomes of this meeting!
Gli ultimi otto messaggi ricevuti dalla Federazione
-
Right, which ActivityPub.Space follows and auto categorizes, which ends up as a way for microblog content to make its way into the threadiverse. @strypey@mastodon.nzoss.nz
@silverpill@mitra.social sorry for interjecting 😁
-
-
> @strypey@mastodon.nzoss.nz said:
>
> We could instead try to agree on a separate place for all discussions about fediverse coordination (would it rub anyone up the wrong way if I described this as fediverse governance?). But it does makes sense to discuss a federated network in a federated network, rather than a separate, centralised forum.I keep harping on this one point because it just makes so much sense that it'd be silly not to. The new blood (new software devs implementing AP) always appear on fedi, not some third-party site, first.
To your main point, fedi on Mastodon is all just everybody talking in the same room. Certainly that's why it seems like there's so much meta-discussion about AP.
This isn't the case on the threadiverse, where discussions are segregated/categorized by community.
-
@mariusor awesome! ♥️
-
@pfefferle I added a PKCE task to my todo list:
-
@pfefferle if I'd come up with a scheme for them they would be related to pairs of activityType:objectType entries (instead of a global write), or maybe just the activityType
Ie, Create:Note, Create:Image, Undo, Delete.
-
@mariusor yea, I think the scopes and the PKCE part was the issue!
but finally... 😊
-
@pfefferle love it! 💗
GoActivityPub doesn't really do "scopes" because I couldn't think of a way store the permissions on the server side in a way that doesn't require custom logic to interact with vanilla ActivityPub objects.
