Hacker News new | past | comments | ask | show | jobs | submit login
The Real Deal About rel="me" (zegnat.net)
133 points by tempodox on Aug 27, 2018 | hide | past | favorite | 27 comments



The largest problem the semantic web is tackling is answering the question that is at the end of the article

> If someone has the URI of that thing, what relationships to what other objects is it useful to know about?

In many ways, its really a question about the observer than the page; which means the pages seeking to answer it - even for their own special cases - will get the answer consistently, and often subtly, wrong.

The upshot is that pages will comply or optimise for particular observers- for financial or political reasons. This makes it very hard for observers not fitting the expected mould to make definitive use of the semantic web.

For example, a world in which distributed validation is not immediately politically or financially important (ours) is one in which such schemes as described in the article are faced with a huge problem of being consistently and often subtly broken.

User validation isn't something I'd like to be widely broken.


rel="me" for authentication sounds like it could help with the inevitable problem of Mastodon account verification. Instead of putting a verified checkmark on your name, whatever that is supposed to mean, put one on your home page if there's a rel="me" pointing back to the same profile. Parties that don't fully trust you (other federated servers, most likely, but individual clients if necessary) can verify the relationship before displaying the check mark.


Mastodon now publishes rel=me on profile links, so you can do bidirectional verification between mastodon and other rel=me publishers like github and wordpress, as well as your own site. https://xoxo.zone/@KevinMarks/100616472097157585


more discussion of this in a fediverse context: https://pleroma.site/notice/3922993


This is similar to my own idea for how to authenticate a Twitter verification esque setup; having the user upload auto generated files to their server and the site check for those, like how Google verifies accounts in Webmaster Tools.

The issue however is that I suspect verification should also have the purpose of verifying that the individual/group doesn't just own a third party domain/resource, but that they're the owners of the version people associate with that name. All these systems make it very easy to just register say 'Microsofte' and end up with a verified account called 'Microsoft' or what not. That's going to allow for a lot of easy impersonation.


IIRC, App.net did exactly that — rel=me based verified checkmarks for the "personal site" field


I tried finding a post-mortem on App.net but couldn’t. What exactly happened with them?


Couldn't generate enough revenue on paid subscriptions to be sustainable.

https://en.wikipedia.org/wiki/App.net#History


I really like the Indie Web stuff, and I think that their idea of using one's own website as a login is a great one. The problem is that one actually ends up using some third-party website (e.g. github.com) to run authentication for one — and generally via a fourth (indieauth.com). Adding two extraneous parties to an authentication seems pretty extraneous to me: rather, it'd be a good idea just to specify a way to run web sign-in entirely from one's own site.


One can do that, but it's built entirely on a protocol to do exactly this:

> just to specify a way to run web sign-in entirely from one's own site

and many in the community do not involve third parties. The rel=me thing through IndieAuth.com is merely a trick to get started quickly, by relying on existing identity providers.

http://indieauth.net/


I've found that almost all the results I get from Google these days point to some "big site": pinterest, quora, wired, verge, etc. Often, these sites are behind a paywall/login wall, and the content isn't very good either.

Is the whole concept of authors publishing their opinions and thoughts on their personal websites dying, or is Google ranking such posts lower?


By the way, why can't I still tell Google to ignore e.g. pinterest or w3schools?

Google wants to know everything about me so they can serve me better (they claim), but a simple preference to exclude a website from my search results is not possible?


>By the way, why can't I still tell Google to ignore e.g. pinterest or w3schools?

You can. Use "-site:pinterest.com -site:w3schools.com". To facilitate using it in every search, setup a keyword search so you can type "gsearch blah" and have the querystring automatically add those two filters. I agree there should be a way to add sites to a global blacklist in your user settings if you have a Google account. I'm sure Google has monetary reasons for not doing so though.


https://chrome.google.com/webstore/detail/personal-blocklist...

Personal Blocklist (by Google)

Blocks domains/hosts from appearing in your Google search results.


Neat, but this isn't a complete solution as I, and many others, use Firefox. I can't see a good reason this needs to be an addon instead of a user setting, other than to only allow only Chrome users to use the "official" add-on. There is a Firefox version that, perhaps a bit tongue-in-cheek, is called "Personal Blocklist (not by Google)". I keep the number of addons I install to a minimum so will be sticking with my keyword searches (I actually filter Pinterest from my searches).


Doesn’t work for images which seems to be 90% Pinterest these days. Getting some ehow flashbacks.


> setup a keyword search

What do you mean by that, exactly? Is that browser-specific?


It works in any modern browser that I'm aware of - it allows you to use the Address Bar/Omnibar to conduct a search by typing a keyword. For example, I can search Youtube by typing "y Daoko Fog" and it will search Youtube for "Daoko Fog" because the letter "y" is my keyboard for Youtube. You also don't need to use it just for searching - you can use it for quicker navigation since ultimately it is just swapping your text in for the spot in the keyword, you can have it set up like "news.ycombinator.com/%s" and type in "hn newest" or "hn show" or "hn news" to be taken to the respective pages.

In Firefox you can right click most any search bar and "Add a Keyword for this Search".

It used to be that in Chrome it was that easy as well, but now you need to edit a bookmark and it's a bit more involved OR you can add a "Search Engine" and customize the keywords in about:preferences#search

In mainstream browsers at least, I believe it is implemented as an additional field to any bookmark. You change the URL to have "%s" where the search term should go in the URL and then you update the Keyword field of the bookmark.

So, for example, a Youtube bookmark would look like "https://www.youtube.com/results?search_query=%s"

Then when you type the keyword and search, the %s gets replaced with your search phrase. You would need to hardcode the -site: bits to have it always added to your search. You can even create multiple bookmarks that filter out different sites if you want.


Google started this in 2012. Search has slowly gone down in quality. The older the content the more likely it will be ignored


As far as I've seen, it's been both a centralisation of content and heavy abuse of SEO by large sites to force themselves to the top of basically any search.

I know I have no interest fighting with SEO and I doubt many of the people who host their own small sites do either.


Maybe also add Google's reluctance to truly punish popular/large websites for dubious SEO tactics. If a lot of them got banned just as easily as smaller sites do for similar things (link buying and networks, thin/duplicate content, etc) the results might be quite different.


No kidding. Pinterest makes reverse image search almost useless.


Reading the article I couldn't get rid of the feeling "gee, what a first world problem" (where by the world I mean the World Wide Web).

On the actual topic:

Rel="me" sounds bizzarely narrow, at the same time wildcard-ish and borderline narcissistic. Something like Rel="about:author" or Rel="author:blog" seems better to me.

Disclosure: not big on web semantics.


As the article says, it's not for authorship (rel="author" and a bunch of other options), but for connecting profiles. What's borderline narcissistic about that? Is keybase.io also "borderline narcissistic" since you can verify accounts on it, or Github because you can link to your homepage from your profile? (which they actually mark up with rel="me", but that's all rel=me does: make the existing links machine readable, and the bidirectional linking allows some level of verification)


Thanks for clarifying and pardon my half-assed reading, I get the idea now!

I see the benefit of authenticating personal profiles and protecting people against account hijacking and fake accounts.

With "borderline narcissistic" I was referring to the fact that personal profiles are a giant part of the web nowadays (which is sad on some level) and creating even a special rel value for it felt like submitting to the current state of affairs.


Personal profiles were always a big part of the web; in the 90s, it was all those sites with URLs with a tilde (e.g. https://www-cs-faculty.stanford.edu/~knuth/), and lots of pages on Geocities et all were also personal profiles.


> Rel="me" sounds bizzarely narrow, at the same time wildcard-ish and borderline narcissistic. Something like Rel="about:author" or Rel="author:blog" seems better to me.

That article states that this is not the intent of rel="me" but rather: "The me link relationship can be seen as saying: the URL I am pointing to is about the same person as the page I am on." So it's not describing the author so much as noting that the two pages are about the same person.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: