George Dorn is a user on social.coop. You can follow them or interact with them if you have an account anywhere in the fediverse.

Tonight's project: An RSS feed of my Mastodon favourites:
github.com/georgedorn/python-t

A huge thanks to @SamR1 for implementing 95% of this in her original repo: github.com/SamR1/python-twootf

George Dorn @gdorn

Sometimes, is amazing. I've been meaning to get faves-to-rss working for mastodon the way I have it working for birbsite for ages, but tonight I started a fresh search to see what had already been done and there was a Flask app that just needed a few tweaks.

Future plans might include allowing other users to use it for any instance and authenticate via oauth, but that's a huge jump forward. (And is painful...)

@gdorn I think free software people should drop OAuth. It was designed with re-centralising intent.

I think we'd be better off using XMPP authentication.

Capitalist social media dinosaurs need to feed you cookies and track you and identify you everywhere you go.

We don't really need any of that. We only need to authenticate.

@h I agree in principle, but until Mastodon supports something other than OAuth, I'm kinda stuck.

I don't know much about XMPP, other than it is a huge collection of protocols grown out of Jabber. Does it do three-way authentication like OAuth, such that a user can authorize a third-party app like mine and provide a reusable auth token rather than showing me a password?

@gdorn No it doesn't do that, the authentication model is more traditional and straightforward.
However, automating the use of XMPP + OTR the user could authenticate the party that's requesting identity access.

@h OpenID is probably a closer replacement, then, though much older. The problem space is still somewhat centralized, though, it's just that a Mastodon instance is acting as the 'center' rather than a capitalist social media dinosaur...

@gdorn Nothing is standing at the centre of XMPP / OTR.
You could have any Mastodon instance authenticate against any XMPP server. The XMPP server doesn't even have to know that you're doing authentication with OTR, that's transparent to the server, and nothing new needs to be installed on it.

I may be missing something, but I don't know how OpenID is better.