jdev - 2021-03-25

Someone in here was talking about how they wanted other clients to implement adhoc commands recently. Would whomever that was be willing to do a demo of adhoc commands using whatever client you choose that supports them and talk about them for a few minutes in 2 weeks time for the office hours?

If it's something you think other clients should implement, this might be a good way to showcase them and try to get client authors onboard

Not a full presentation, just a screen share / demo and you can talk off the top of your head about why you like them or the UX or something.

Psi does, BTW.

Or did.

(Swift does, but not to arbitrary JIDs)

i think profanity does too, but no multistep adhocs yet

poezio does too, maybe with a plugin that needs to be loaded first(?)

One of you should consider giving a demo of that :)

Not sure if it's only in my personal fork but `clix adhoc` is a thing as well.

And mod_rest can do ad-hoc!

Ge0rG, afaik /adhoc handles multi-step just fine

Converse.js also gained ad-hoc support not too long ago.

And there's that ancient dusty mod_admin_web for Prosody which is essentially an ad-hoc-only client.

Ge0rG, no plugin needed.

Pidgin has a great UI for it, integrated into the window menu.

D:

Frame it

The change that caused the most issue reports in the last major version of gajim was to not allow to ignore cert errors other than self signed and expired

it seems alot of servers beeing setup where the common name does not match the domain

and server admins are fine with that and tell users to ignore the error

Well, it *is* fine if e.g. it’s your own server. The difference between it being issued for one domain you own, and another domain you own is negligible. I realise that’s an edge case.

Could it possibly be related to how Prosody users are often confused about whether the cert should match the domainpart or the hostname (SRV target)? ✏

last cert had as common name "localhost"

domain was xxx.aws.com

😑️

Kev maybe my knowledge about certs is not good, but how would a client know if the domain in the common name is also owned by the same person as the url?

You can't know that without already knowing it because you configured the service.

There's some ways to add indirection for certificates tho, like DANE, POSH, or that DNSSEC thing where you consider the SRV target name an acceptable identifier

If it’s my service, I’ll just know.

It’s not a generally applicable thing.