Post AtxwCpc5LeUGwe1sWm by silverpill@mitra.social
(DIR) More posts by silverpill@mitra.social
(DIR) Post #AtxdWYzowSRg4PpJse by silverpill@mitra.social
2025-05-10T19:38:43.770091Z
1 likes, 0 repeats
Started writing a new FEP:FEP-0151: NodeInfo in Fediverse Software (2025 edition)Mentioned some best practices. What else should be added there?#FEP #NodeInfo
(DIR) Post #AtxoHJ0VCnJ5dK4Z60 by reiver@mastodon.social
2025-05-10T21:28:44Z
0 likes, 0 repeats
@silverpill Regarding:"In order to hide the usage statistics, the values of properties in the usage object could be set to 0."What do you think about setting it to 'null' rather than '0'?I suppose if some software wasn't written robustly, it might "panic" on getting a non-number.But, to me 'null' seems more appropriate.
(DIR) Post #AtxwCoFMQeiQhsODT6 by fentiger@zotum.net
2025-05-10T21:58:42Z
0 likes, 0 repeats
"Servers SHOULD implement NodeInfo..." seems a bit strong, especially considering that some people are quite strongly opposed to it. Is this really a SHOULD? Or would it be better to write a paragraph or two about the pros and cons, and let implementers decide for themselves? Would it be worth recommending that implementers provide a config option to allow NodeInfo to be switched on and off by the instance admin?Should there be a recommendation that "Consumers SHOULD NOT assume that any given Fediverse site will implement NodeInfo"?I've seen code out there that uses a NodeInfo hit to decide which auth protocol to use for cross-instance login. I personally don't like this approach and would prefer not to encourage people to use designs like this.
(DIR) Post #AtxwCpc5LeUGwe1sWm by silverpill@mitra.social
2025-05-10T23:07:59.003348Z
0 likes, 0 repeats
@fentiger>"Servers SHOULD implement NodeInfo..." seems a bit strong, especially considering that some people are quite strongly opposed to it. Is this really a SHOULD?I want to encourage people to implement NodeInfo (because end-users expect it to be implemented) but discourage certain practices, so SHOULD feels appropriate there.RECOMMENDED would work too>Would it be worth recommending that implementers provide a config option to allow NodeInfo to be switched on and off by the instance admin?Yes>Should there be a recommendation that "Consumers SHOULD NOT assume that any given Fediverse site will implement NodeInfo"?+1>I've seen code out there that uses a NodeInfo hit to decide which auth protocol to use for cross-instance login. I personally don't like this approach and would prefer not to encourage people to use designs like this.I also don't like it.There are even FEPs that recommend using NodeInfo to signal capabilities: https://codeberg.org/fediverse/fep/src/branch/main/fep/9fde/fep-9fde.mdI mentioned that NodeInfo shouldn't be used in that way in the "When to use NodeInfo" section.
(DIR) Post #AtzgjsgtiUs15zwBXs by silverpill@mitra.social
2025-05-11T19:23:56.832892Z
0 likes, 0 repeats
@fentiger Added "Privacy and security considerations" section which explains why people might want to disable NodeInfo:https://codeberg.org/silverpill/feps/src/commit/451193095d8330e42f7400541c9f751a9e28c7d2/0151/fep-0151.md#privacy-and-security-considerations