20200329-telco.md

SpaceAPI Telco March 2020

Date: 2020-03-29
Location: The Internet
Who: Danilo (@dbrgn), Raphi (@rnstlr), Timm (@gidsi)

Previous meeting: 20200128-telco.md Next meeting: 2020-05-10 20:00 CEST (UTC+2)

1. Status

Timm

• Add a warning on our website that spaceapi.net is deprecated
• DNSSEC
  • Waiting for provider to add DNSSEC support to the control panel
• Website refactoring

Danilo

• MyHackerspace app updates
  • Upgrade Android SDK, remove MemorizingTrustManager
  • New domain: spaceapi.io
  • Switch default directory to directory.spaceapi.io
  • Use Java 8
  • Update icons with new vector drawables
  • Bump minSdkVersion to 21 (Android 5.0)
  • Add support for annotations

Raphi

• Tried to implement spaceapi-rs with 0.13 and 0.14 support spaceapi-community/spaceapi-rs#85

2. Server TLS Config

The directory can currently not be accessed from Android < 7: https://www.ssllabs.com/ssltest/analyze.html?d=directory.spaceapi.io

(Funny enough Android 4.2 seems to work, but not Android 5 and 6)

Reason is most probably the ciphersuite selection.

Resources:

• Mozilla recommendations: https://wiki.mozilla.org/Security/Server_Side_TLS
• Cipherlist: https://cipherlist.eu/

Since the content we serve is not sensitive at all, we don't need to ensure that potentially insecure ciphersuites cannot be chosen by a client that does not support newer ciphers.

3. 0.14 Upgrade

• Provide a example implementation in Python?
• Generator for Rust: https://openapi-generator.tech/docs/generators/rust
• App actively developed again, by @dbrgn and maintained by @rorist 😃
  • Add support for 0.14
• Open PR
  • Instagram contact -> close because project link is feasible
  • SpaceFED link corrections -> Timm will check with hackerspaces from the Netherlands
• Open Issues
  • Schema not reachable
    • Use URN like urn:spaceapi:schema:root:0.13?
    • https://json-schema.org/understanding-json-schema/basics.html#declaring-a-unique-identifier uses an URL
    • Let's just host the schema then
  • New JSON Schema version
    • Vey low support among libraries so far, so let's wait with an implementation until this gets better
  • 3D Printers
    • It's not trivial to create a good spec that covers all cases
    • Maybe some people want to publish information about their CNC mills or their laser cutters?
    • It's probably best to create a draft/proposal and then test it in reality. The ext_ fields are well suited for this.
  • Streams and feeds: @timm will take a look
  • Maybe add generic URLs? -> @dbrgn
• Maybe publish a release candidate once all open issues are handled? Then we can get early feedback from implementors, and maybe some implementations can already update their code to support the upcoming release.

4. Geekend

¯\(ツ)/¯

Cooohohohorona 😷🤒🦠

Postponed until after the apocalypse.

5. Website Refactoring

See SpaceApi/website#66

6. New Validator GUI

There's now a draft for a GUI for the GitHub validator bot!

https://shielded-peak-62758.herokuapp.com/?url=https://api.westwoodlabs.de/spaceapi/

7. Varia

• Self host swagger instance to host documentation for our REST API
• Offer people remote help?

8. Todos

Danilo:

• MyHackerspace release
• Generic URLs in schema
• Review SpaceApi/website#66
• Update validator README with quick intro and link to OpenAPI endpoint

Raphi:

• spaceapi-rs 0.14 support
• Test website from SpaceApi/website#66
• Ask g5pw and s3lph to join next meeting

Timm:

• TLS issue
• Add a warning on our website that spaceapi.net is deprecated
• DNSSEC
  • Waiting for provider to add DNSSEC support to the control panel
• Website refactoring