Lumifer comments on The Web Browser is Not Your Client (But You Don't Need To Know That) - Less Wrong

22 Post author: Error 22 April 2016 12:12AM

You are viewing a comment permalink. View the original post to see all comments and the full post content.

Comments (47)

You are viewing a single comment's thread. Show more comments above.

Comment author: Error 29 April 2016 04:09:14PM *  1 point [-]

Your proposal requires a lot of work

Well, yes. That's more or less why I expect it to never, ever happen. I did say I'm a crank with no serious hopes. ;-)

a new protocol, using JSON over HTTP, with an API representing CRUD operations over a simple schema of users, posts, comments, et cetera

While I don't object in theory to a new protocol, JSON over HTTP specifically is a paradigm I would like to destroy.

(which is kind of hilarious given that my day job involves an app with exactly that design)

Some kind of NNTP2 would be nice. The trouble with taking that approach is that, if the only implementation is your own, you haven't actually gained anything.

Admittedly every protocol has to start somewhere.

sites can delegate authentication to other sites via Google/Facebook login, OpenID

I had actually forgotten about OpenID until you and Lumifer mentioned it. Also, since you mention it, I'm a huge fan of pubkey-based auth and am bitterly disappointed that almost nothing I use supports it.

I'll just repeat my core argument here. Extant NNTP software is far more terrible, if you penalize it for things like...

I think this is our core disagreement. I find web forum software worse even after penalizing NNTP for everything you mention. Well, partially penalizing it; I don't acknowledge the lack of editing (supercedes exist), and it turns out links to netnews posts also exist. Which is something else that I'd forgotten. Which is funny because following such a link is how I discovered Usenet.

Having an RFC isn't really that important.

Agreed. Any spec would do as long as it's widely implemented and can't be pulled out from under you. The RFC "requirement" is really trying to rule out cases where one party has de-facto control of the spec and an incentive to abuse it.

Comment author: DanArmak 29 April 2016 06:20:04PM 0 points [-]

Well, yes. That's more or less why I expect it to never, ever happen. I did say I'm a crank with no serious hopes. ;-)

It's a pity that whatever energy exists on LW for discussing technological changes to the diaspora is exhausted on a non-serious proposal.

When you argue for something you don't expect to be accepted, you lose any reason to make reasonable compromises, lowering the chances of finding a mutually beneficial solution.

While I don't object in theory to a new protocol, JSON over HTTP specifically is a paradigm I would like to destroy.

I may share your feelings. But if you want an API to be accessible to Web clients, it pretty much has to be JSON over HTTP. Any other format you support will have to be in addition, not instead of that.

Json isn't actually bad as a slightly-structured, self-describing, human-readable format. Maybe you prefer YAML or something, but I don't feel there's a lot of difference to be had. Certainly it's far better than non-self-describing, non-textual formats unless you really need to optimize for parsing performance or for size on-the-wire. And I'd argue you don't, for this usecase.

HTTP is horrible (and I say this as someone who wrote a lot of low-level HTTP middleware, even a parser once). Using maybe 50% of the semantics, and pretty much 0% of the syntax, and adding the features of HTTP/2 and some others they couldn't fit into the spec, would be wonderful. But we don't really have that option; we're stuck with it as something we can't change or avoid using. And I too hate having to do that.

But you know what? The same is true of TCP, and of IPv4, and of the BSD socket API, and a thousand other fundamental API designs that have won in the marketplace. At some point we have to acknowledge reality to write useful software. A forum / discussion protocol doesn't conflict with JSON over HTTP (much). We need to to focus on designing a good API, whatever it runs on.

If it helps, you can put the HTTP/JSON encoding in a separate specification, and be the happy user of a different-but-compatible encoding over a gateway.

I think this is our core disagreement. I find web forum software worse even after penalizing NNTP for everything you mention.

You don't address the point I feel is most important: the NNTP model (distributed immutable messages, users not tied to servers, mod powers and karma not in the spec, ...) just isn't the one we use and want to keep using on discussion forums.

it turns out links to netnews posts also exist.

But they don't work with supercedes, because they link to immutable message IDs. So the server has to dereference the link, has to have kept all the old (superceded) versions, and has to prove the supercede chain validity to the client in case of signed messages. This is just unnecessarily ugly.

Besides, they are URIs, not URLs. That's not something the web can handle too well. You can include a server in the link, making a URL, but NNTP doesn't have a concept of an authoritative host (origin), so once again, why use NNTP if you're not going to move messages between servers, which is the whole point of the protocol? If you just want to store them at a single place, it would make as much sense to use shared IMAP. (Which is to say, not much.)

Comment author: Lumifer 29 April 2016 07:04:20PM *  1 point [-]

Before we get deep into protocols, is there any kind of a spec sheet anywhere?

Saying you want better software for discussions is... horribly vague. I have a strong feeling that we should figure out things like lists of desirable features, lists of undesirable misfeatures, choices of how one list will be traded off against the other list, etc. before we focus all the energy on stomping JSON into tiny little pieces.

Comment author: DanArmak 29 April 2016 09:02:19PM *  1 point [-]

Here's my shortlist of requirements:

Basic architecture: network of sites sharing an API (not an interface). A site can have a web client as part of the site (or several), but at least some clients can be written independently of a site. Users can choose to use different/customizable clients, and in particular, aggregate and cross-link content and users across sites. It should be possible, at least in theory, to write a non-web cross-site client with lots of custom features and use it as one's only interface to all discussion forums without any loss of functionality.

We need at least feature parity with LW, which is the most feature-full of diaspora blogs and forums; other sites tend to have subsets of the same features, so they should be able to disable e.g. private messages if they want to. So: top-level posts with trees of comments, both of which can be edited or retracted; posts have special status (tags, categories, require permissions to post, etc); authenticated users (unless the site allows anonymous or pesudonymous comments), so a user's comments can be collated; permalinks to posts and comments; RSS feeds of various things; etc.

Users should follow the user@host pattern, so they can be followed across sites. Different authentication methods can be integrated (Local/Google/Facebook/OpenID/...) but the spec doesn't concern itself with that. User permissions should be stored at each site, and be powerful enough to allow different configurations, mod and admin powers, etc. Posts and messages should allow pubkey signatures, and users should be able to configure a signing key as part of their account, because some people really enjoy that.

In the LW 2.0 discussions, people proposed different variations on karma. The API should include the concept of a user's karma(s) on a site, but for voting etc. it should probably limit itself to storing and querying data, and let the implementation decide how to use it. So e.g. the server implementation could disallow posting to a user with insufficient karma, or the client implementation could hide downvoted comments. The API would specify the mechanism, not the policy.

Finally, there need to be implementations that are pain-free and cost-free for site admins to install. At the very least, it should not involve running completely custom server software, or completely rewriting existing web clients and their UX. Ideally, there would be easy adapters/plugins/... for existing client and/or server software.

Comment author: Error 29 April 2016 09:29:48PM *  0 points [-]

I agree with most of this, with the exception that top-level posts should not have any special status at the protocol level other than not having a parent. Clients are free to present them specially, though, including whatever 'default' interface each site has. Whatever moderation layer exists may do the same.

I also dislike private messaging systems -- not so much because they shouldn't exist, but because they should be implemented as email accounts that only deliver mail among local users, so you can handle them in your regular email client if you want.

[Edit: Note that tags and a lot of other post metadata could be implemented as extra headers in a news article. Not karma, though.]

Your description of basic architecture in particular is an excellent summary of what I want out of a discussion protocol.

Comment author: DanArmak 29 April 2016 10:48:37PM 0 points [-]

top-level posts should not have any special status at the protocol level other than not having a parent.

Those are implementation details. The point is that top-level or parent-less posts have a special semantic status: they start a new conversation.

I also dislike private messaging systems -- not so much because they shouldn't exist, but because they should be implemented as email accounts that only deliver mail among local users, so you can handle them in your regular email client if you want.

It's a matter of integration: I want the same settings, and client software, that you use for the rest of the forum to apply to privmsgs. For instance, blocking a user's messages, sending privmsgs as replies to forum threads (and displaying that correctly in the client), ...

And I don't want to have to use two different client applications at the same time (email & forum) for private vs public messages.

And most people only use webmail, and you can't tell gmail.com to display messages that live on the lesswrong.com IMAP server, if that's what you intended.

Comment author: Error 30 April 2016 03:24:35AM 0 points [-]

It's a matter of integration: I want the same settings, and client software, that you use for the rest of the forum to apply to privmsgs.

I don't share the preference, but I don't think this represents a conflict. There's no reason a web client couldn't present one UI to its users while doing two different things on the back end, IMAP for PMs and whatever else for the forum. Newsreaders do exactly that to support reply-by-email, and it works fine from what I've seen.

Comment author: DanArmak 29 April 2016 08:34:52PM *  0 points [-]

I'm very willing to engage in this. (And I described what I want in some of my other comments). I'll post my spec sheet (which I think includes most of Error's) in a separate reply. But first, before we get deep into feature lists and spec sheets:

Suppose we agree on a protocol (or whatever). Suppose it's so good that we can convince most people it's technologically and socially superior to existing solutions - not counting the unavoidable costs of using custom software and of changing things, which are significant.

Given all that, how likely will we be to 1) write all the code needed, to the quality of a production project (actually, multiple ones), and provide support etc. for the foreseeable future (or convincing others to help us do so); 2) convince enough diaspora site admins, and readers/commenters/users if applicable, to switch over?

Obviously this depends on how much our proposal improves (or promises to improve) on what we have now.

Comment author: Lumifer 29 April 2016 08:48:47PM *  0 points [-]

See my answer to Error, but for the "how likely" question the only possible answer that I can see is "One step at a time".

First you need an idea that's both exciting and gelled enough have some shape which survives shaking and poking.

If enough people are enthusiastic about the idea, you write a white paper.

If enough people (or the right people) are enthusiastic about the white paper, you write a spec sheet for software.

If enough people continue to be enthusiastic about the idea, the white paper, and the spec sheet, you start coding.

If you get this far, you can start thinking about OSS projects, startups, and all these kinds of things.. :-)

P.S. Oh, and you shouldn't think of this project as "How do we reanimate LW and keep it shambling for a bit longer". You should think about it as "What kind of a new discussion framework can we bestow on the soon-to-be-grateful world" :-)

Comment author: Error 29 April 2016 09:51:13PM *  0 points [-]

I get the impression most projects do that backwards, and that that's a large part of how we got into this giant mess of incompatible discussion APIs.

Somewhere later in this sequence I'm going to address the social problem of convincing people to buy back in. The very short version is: Make it more powerful than what they've got, so they have an incentive to move. Make sure they are still running their own shows, because status and sovereignity matters. And make it more convenient to migrate than to manage what they've got, because convenience is everything.

Once you get three or four diasporists back, network effects does the rest. But it needs to be an improvement to the individual migrant even if nobody else does it, otherwise the coordination problem involved is incredibly hard to beat.

You should think about it as "What kind of a new discussion framework can we bestow on the soon-to-be-grateful world" :-)

Sometimes I think the best way to promote my ideas would be to start an NNTP-backed forum hosting service. I know it's within my capabilities.

Then I realize that 1. that would be a lot of work, and I have a day job, 2. nobody cares except me, and 3. I would be competing with Reddit.

Comment author: Error 29 April 2016 08:15:09PM 0 points [-]

I had a list of...not features, exactly, but desirable elements, in the first post. I intended to update it from comments but didn't.

Comment author: Lumifer 29 April 2016 08:41:10PM 0 points [-]

I want higher and deeper X-)

Higher in the sense of specifying desirables from some set of more-or-less terminal goals. For example, you say "centralized from the user perspective" -- and why do we want this? What is the end result you're trying to achieve?

Deeper in the sense of talking about base concepts. Will there be "posts" and "comments" as very different things? If so, will the trees be shallow (lots of posts, mostly with few comments, no necroing) or deep (few posts, mostly with lots of comments, necroing is encouraged)?

Will there be a "forum"? "subforums", maybe? Or will there be a pile of tagged pieces of text from which everyone assembles their own set to read? Will such concept as "follow an author" exist? How centralised or decentralised will things be? Who will exercise control and what kind of powers will they have?

That's not a complete set of questions at all, just a pointer at the level which will have to decided on and set in stone before you start discussing protocols.