Office Hours Transcript, 2009-06-25
Brian Kennish (Googler)
to do the formatting for us. Unfortunately, a non-insane robot
implementation requires API pieces that aren't in place yet. ETA for
the robot and the return of prettyprinting: end of July / beginning of
August.]
12:00 pm
Brian Kennish:
Office Hours, 2009-06-25
Welcome to API office hours! Our door is ajar (switching things up!) ...
Please top post your question or comment about the robot, gadget, or
embed API to make sure we see it. You can do so by replying to this
blip.
A transcript of this wave will be made publicly available. If you
don't want to appear in the transcript, delete your blip after getting
a response. Be careful not to remove neighboring blips.
And don't add robots to this wave! (They might be broken and force
certain people to fix up every blip by hand when transcribing. :-P)
12:01 pm
Brian Kennish:
Thank you for the questions! And thanks Rosy for the *interesting* translations.
11:30 am
Matthew Wild:
How hard would it be (assuming it is possible in the current
architecture) to allow digital signing of messages? Would this be
possible through an extension, if not officially supported?
11:30 am
Laurent Duchateau:
Good idea and also encryption of messages?
11:31 am
Robert Johnston:
You are both aware that this all is happening over SSL, and the data
is only shared/visible with people who are members of a wave. If
you're not invited, you can't see it.
As it is, most waves have been made publicly, so everyone can see them.
11:32 am
Matthew Wild:
I'm aware, but it wouldn't stop for example an "evil" server replacing
words in my messages now, would it?
11:32 am
Laurent Duchateau:
OK. But will it be still true when federation of different wave
servers will be reality ?
11:34 am
Robert Johnston:
When a wave is sent, as explained in the Google I/O demo, it only gets
sent to the servers that participate in the wave. So if this was a
wave between m...@example.com and y...@sample.org, only the wave servers
at example.com and sample.org would get to see it.
11:35 am
Laurent Duchateau:
Thank you. So we need to make sure our Wave server is secure because
there is no encryption until the user.
11:36 am
Robert Johnston:
That wasn't explicitly stated, but as David Byttow has stated just
down there, they intend to support encryption as part of the
federation protocol (if I've understood that right)
11:37 am
Laurent Duchateau:
OK. Thank you.
11:31 am
David Byttow:
I believe we plan to support encryption inherently as part of the protocol.
11:34 am
Matthew Wild:
Transport encryption is not the same as signing messages. Or is this
not what you mean?
11:37 am
David Byttow:
Maybe I misunderstood your question, are you talking about for calls
back to robots from Wave? Or between the wave client and wave server?
I'm now assuming the former, as I'm not sure why you'd prefer the
latter.
11:39 am
Matthew Wild:
It would be between any entities on the wave. In essence it would be
that any changes I make would be signed.
(Why can't I get it to stay at the same indentation as your blip?)
1:57 pm
Melissa Sinclair Stevens:
Select the blip (but don't go into Edit mode) and then press
shift-return. This will create a continuation blip at the same level
rather than indenting.
11:40 am
David Byttow:
So you're concerned about a MitM (man-in-the-middle) attack? Whatever
your client sends to our server is verified?
11:41 am
Matthew Wild:
Whatever my client sends *via* the server is verified. It's exactly
the same principle as signed emails today. I have a secret which the
server I am using doesn't, and it allows recipients of my data to know
that it really was me who generated it, and not anyone else.
11:42 am
David Byttow:
Okay. To answer this, I'm not sure what our plans are in this arena.
If we do have public plans, they would be on the federation white
papers. You should probably ask this question
wave-p...@googlegroups.com mailing list.
11:42 am
Matthew Wild:
Oki-doke, thanks :)
11:26 am
Justin Johnson:
Here's a simple question. Any plan on adding gravitar...or is it
already plugged in?
11:27 am
Vineet Kumar:
I think he means this one: gravatar.com (come on, linky, there you go!)
11:28 am
Justin Johnson:
Spelling is for the content department, but ya, that's the one.
11:28 am
David Byttow:
There are no plans for this. However, we are discussing various
integrations that will not require you to set your avatar explicitly
in mail settings.
11:16 am
Justin Johnson:
I'm demoing this for my friend. Can someone be a pal and type something
11:16 am
Marcel Prasetya:
something?
11:17 am
David Byttow:
I like to type things. Perhaps a typing race is in order.
11:19 am
Marcel Prasetya edited this message at 11:19 am
Eliza will win, for sure.
11:17 am
Justin Johnson:
Well done, thanks!
11:16 am
Brian Kennish:
I was going to say that. :-P
11:13 am
Matthew Wild:
Let me try saving you the psychologist bill...
Do you have any timescale on when federation will begin working? (in any form)
11:15 am
David Byttow:
Officially, no. However, in my opinion, I think we are planning
something soon... We are actively working on getting something
together for you guys.
11:16 am
Matthew Wild:
Ah great. I can't wait :)
11:09 am
David Byttow:
*yawn*
11:09 am
Marcel Prasetya:
zzzzz
11:10 am
Brian Kennish:
I guess everything works perfectly and our documentation is flawless. :-)
11:10 am
David Byttow:
Yup -- and everyone is busy writing robots and gadgets.
11:11 am
Brian Kennish:
Someone should write a robot to ask us questions then.
11:12 am
David Byttow:
Perhaps we should add Eliza.
11:13 am
Brian Kennish:
We might need a robot psychologist if no one asks us stuff soon.
11:13 am
Rafe Needleman:
Queree the roboto questioner?
11:14 am
Brian Kennish:
Ship it!
11:39 am
Marcel Prasetya:
bouncy:ro...@wavesandbox.com
11:39 am
Vineet Kumar (and Rosy Etta):
what does bouncy do?
11:40 am
Marcel Prasetya:
Bouncy is supposed to bounce or ban robots.