Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > rocksolid.programming > #164 > unrolled thread

Post and registration, and new ideas

Back to article view | Back to rocksolid.programming

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Post and registration, and new ideas Anonymous <poster@anon.com> - 2020-12-19 12:26 -0800
    Registration and posts work trw <trw@anon.com> - 2020-12-20 01:17 +0000
      Close to switching trw <trw@anon.com> - 2020-12-20 01:31 +0000
        a bbx post RetroGuy <RetroGuy@anon.com> - 2020-12-20 11:41 +0000
          Re: a bbx post retro.guy@rocksolidbbs.com (Retro Guy) - 2020-12-20 11:44 +0000
          The grass is always greener in the past... trw <trw@anon.com> - 2020-12-20 14:15 +0000
    Re: Post and registration, and new ideas Retro Guy <retro_guy@retrobbs.rocksolidbbs.com> - 2020-12-20 03:28 -0700
      pgp would be nice trw <trw@anon.com> - 2020-12-20 12:28 +0000
        Re: pgp would be nice retro.guy@rocksolidbbs.com (Retro Guy) - 2020-12-28 05:39 +0000
        Re: pgp would be nice trw <trw@i2pmail.org> - 2021-01-11 10:57 -0500

#164 — Post and registration, and new ideas

[Multipart message — attachments visible in raw view] — view raw

>>a863426172a4dfc911
yeah, registration and post have been last on the list, I have the code laying around, so it is just to implement the functions (I will even take the accounts from bbs over). but first i wanted it to be usable for reading, and at least for me it is now (and seems to you as well, thanks for the testing and feedback). In fact, I like the navigation by keyboard a lot now.

When I was playing with the code for the attachments, I had one more idea:
following the concept from here:
http://z5bqfv5v75kxy7pj.onion/soc/res/96.html
where the user always attaches a signed version of the message as an asc file, it would be rather simple to validate the signature server side and show some kind of icon to the user (validated or not validated).
Most of the code to do that I have already written for boxs...and I guess in php it would not be too hard either (thinking about fudforum, rslight and vichan here).
If we would roll that out on all nodes, we would have indeed an identity management fully independent from platform or code, just like described in the original post (of course, each node could still handle local accounts in any way they want).
Would be neat, I think. What do you think, Retro ?

cheers

trw

[toc] | [next] | [standalone]

#165 — Registration and posts work

Registration works.
All the accounts made on def4 are valid as well, and will stay valid.
Posting works, not sure about attachments yet.


-- 
Posted on def4

[toc] | [prev] | [next] | [standalone]

#166 — Close to switching

A little cleaning up here and there, then I will switch def4 to bbx.

-- 
Posted on def4

[toc] | [prev] | [next] | [standalone]

#171 — a bbx post

Just posting on this site from the past (green screen lol)

Retro Guy

-- 
Posted on def4

[toc] | [prev] | [next] | [standalone]

#172 — Re: a bbx post

RetroGuy wrote:


> Just posting on this site from the past (green screen lol)

Well, that works nicely!

-- 
Posted on Rocksolid Light
news.novabbs.org

[toc] | [prev] | [next] | [standalone]

#176 — The grass is always greener in the past...

...and so are the screens :-)

I am quite pleased with the outcome so far, just have to implement proper uudecoding for embedded attachments and proper checks if an attachment is actually encoded or not (some nodes don't encode text files, some do). Also some work left to do on the code to make postings to remote servers with lynx, and finally to clean up.

The handling on bbx is different to rslight or vichan, where you have all the latest news on one glance, using the respective overboards. On bbx it takes much longer to check all the groups individually. This makes it more inviting to scroll through older messages as well (least for me). So it is a slower way to use the forums, and it is kind of nice if have the time (if you just want to spent two minutes checking for the latest, the other nodes are better).
It is also nice to have one node where posting is only possible with credentials. Anonymous posting certainly has its merits and advantages, but so does posting with an identity (average quality of published content is usually higher imo).
So in the future, it will be like:
def2 --> forced anonymous
def3 --> choice between anonymous (guest) and account
def4 --> mandatory account 

-- 
Posted on def4

[toc] | [prev] | [next] | [standalone]

#168

On Sat, 19 Dec 2020 12:26:11 -0800
Anonymous <poster@anon.com> wrote:

> When I was playing with the code for the attachments, I had one more
> idea: following the concept from here:
> http://z5bqfv5v75kxy7pj.onion/soc/res/96.html
> where the user always attaches a signed version of the message as an
> asc file, it would be rather simple to validate the signature server
> side and show some kind of icon to the user (validated or not
> validated). Most of the code to do that I have already written for
> boxs...and I guess in php it would not be too hard either (thinking
> about fudforum, rslight and vichan here). If we would roll that out
> on all nodes, we would have indeed an identity management fully
> independent from platform or code, just like described in the
> original post (of course, each node could still handle local accounts
> in any way they want). Would be neat, I think. What do you think,
> Retro ?

I like the idea. We may have discussed similar before, or maybe that
was some conversation that took place inside my head, lol.

A currently undocumented 'feature' of rslight is to display when a post
was made from the site you're viewing on. The point was to keep people
from posting from elsewhere and impersonating a user on the site. Right
now, it simply displays the poster's username in italics, so if you see
that on my sites, it means it was really posted here. This is done with
a hash based on the message itself, and an internal site key.

It wouldn't be hard to make it specific to a user and not just the
site. rslight users already have a 'key' that can be used, or we can
use another method. If we can come up with a standardized method for
nodes, I'm all for it.

Retro Guy

[toc] | [prev] | [next] | [standalone]

#175 — pgp would be nice

>It wouldn't be hard to make it specific to a user and not 
>just the site. rslight users already have a 'key' that can be 
>used, or we can use another method. 
>If we can come up with a standardized method for nodes, I'm 
>all for it.

If we take valid pgp signatures as credentials, we are fully interoperable, and get rid of a whole lot of problems that other methods would pose (like how to securely exchange account data between nodes and such), with this method every authentication is public and contained in the message itself.
And yes, I remember similar discussions between us from before, but this solution would have some big advantages imo.

-- 
Posted on def4

[toc] | [prev] | [next] | [standalone]

#196 — Re: pgp would be nice

trw wrote:

> bumping this thread

> I just realized when I researched a bit around the official news group listings (here: http://usenet.trigofacile.com/hierarchies/ ), that you already do pgp signing of the control messages for your news server.
> Wouldn't this be the easiest solution to implement (guessing here thet inn does this part of the work) ?

Yes, I sign control messages with pgp. I use a python script to make it reasonably simple:
https://github.com/Julien-Elie/usenet-signcontrol

I agree that pgp signing could work well for communication between nodes. I'm still thinking about what is a good way to make it easy for a user to sign messages and the servers know if it is authentic.

Of course the servers would need each user's public key, which isn't a problem. But what is a good way for a user to sign each message that makes their time spent doing so worth it? We can use pgp auth to display an icon simple enough and demonstrate to a reader that the poster is authentic.

Trying to think of good methods to make it simple for end users to want to participate.

-- 
Posted on Rocksolid Light
news.novabbs.org

[toc] | [prev] | [next] | [standalone]

#229 — Re: pgp would be nice

Somebody went through the whole process already and created something nice:

https://medium.com/@tamanning/nomadic-identity-brought-to-you-by-hubzilla-67eadce13c3b

One more reason for me to look at the fediverse, and maybe a killer feature...guess Hubzilla will be it....

--
Posted on def3

[toc] | [prev] | [standalone]

Back to top | Article view | rocksolid.programming

csiph-web