Sometimes, #opensource is amazing. I've been meaning to get faves-to-rss working for mastodon the way I have it working for birbsite for ages, but tonight I started a fresh search to see what had already been done and there was a Flask app that just needed a few tweaks.
Future plans might include allowing other users to use it for any instance and authenticate via oauth, but that's a huge jump forward. (And #oauth is painful...)
@h I agree in principle, but until Mastodon supports something other than OAuth, I'm kinda stuck.
I don't know much about XMPP, other than it is a huge collection of protocols grown out of Jabber. Does it do three-way authentication like OAuth, such that a user can authorize a third-party app like mine and provide a reusable auth token rather than showing me a password?
@h OpenID is probably a closer replacement, then, though much older. The problem space is still somewhat centralized, though, it's just that a Mastodon instance is acting as the 'center' rather than a capitalist social media dinosaur...
@gdorn Nothing is standing at the centre of XMPP / OTR.
You could have any Mastodon instance authenticate against any XMPP server. The XMPP server doesn't even have to know that you're doing authentication with OTR, that's transparent to the server, and nothing new needs to be installed on it.
I may be missing something, but I don't know how OpenID is better.
@gdorn This is the OTR protocol extension to XMPP https://otr.cypherpunks.ca/Protocol-v2-3.1.0.html
@gdorn I think free software people should drop OAuth. It was designed with re-centralising intent.
I think we'd be better off using XMPP authentication.
Capitalist social media dinosaurs need to feed you cookies and track you and identify you everywhere you go.
We don't really need any of that. We only need to authenticate.