Piero Bosio Social Web Site Personale

@apps Does it use ActivityPub C2S API?

@mariusor That's right.

(I'm not complaining though, I think incomplete specification was a key to AP success.)

>SMTP by default essentially has no authentication and allows spoofing the MAIL FROM header.

Wow, it's just like W3C ActivityPub.

RE: https://mastodon.neat.computer/users/privacyguides/statuses/115559989358002050

@julian

Julian asks if anybody uses bto and bcc, and Dmitri says "yes, absolutely", and said we should check out @darius@friend.camp's Fediverse Observatory for the answer

bto and bcc are not visible in S2S environment:

https://www.w3.org/TR/activitypub/#security-not-displaying-bto-bcc

This is a C2S feature, so maybe it is used by 2 or 3 people. I am all for removing it.

@dmitri

Latest additions to the list of FEDERATION.md implementers: Loops and snac.

There are more than 30 projects in total.

https://codeberg.org/fediverse/fep/src/branch/main/fep/67ff/fep-67ff.md#implementations

@mario Mitra will also choke on an array of URLs. I think the value of this property is supposed to be a string.

(btw, your comment contains additional mentions but these actors are not included in tag or to)

@mario I suspect that no software would understand that.

@mario Mitra supports multiple quotes. For every quote, a FEP-e232 tag is added, but there is always only one quoteUrl

(this comment will have two quotes)

https://mastodon.social/users/Edent/statuses/115310022243443794

https://iosdev.space/users/tootsdk/statuses/115310093224755863

@helge @ozoramore_dev We can make Mastodon irrelevant. That's the mechanism.

@ozoramore_dev People have been talking about this for years, no one is happy with summary...

My favorite solution doesn't need a FEP, though. Because it's <details>.

@smitten_ Do you know what is the status of Fedilinks? Has it been abandoned?
FEP-07d7 was withdrawn, and other proposals have even less support than these two.

@SoniEx2 @julian @rimu @activitypub

@julian Fedilinks website lists 3 MastoAPI clients, but the list is incomplete. I saw Fedilinks being mentioned in changelogs of other clients too.

There was also an Akkoma PR, it was closed by the author: https://akkoma.dev/AkkomaGang/akkoma/pulls/589. I don't quite understand the reasoning, perhaps @smitten could clarify.

@rimu

web+ap, which was proposed by Fedilink authors. To my knowledge, it is the most widely adopted proposal

https://web.archive.org/web/20250402041648/https://fedilinks.org/

(the main site seems to be offline now)

cc @SoniEx2

The object SHOULD inherit a context other than its own.

I don't quite understand what "its own context" means here. Do root (top-level) objects have their own contexts?

When publishing an object with a context property outside the local domain, the context owner SHOULD be addressed (to, cc, bto, bcc).

I think the owner should be addressed even if the context is local, because to and cc are important for access control.