Tim Berners-Lee

Can Updates-Via is also sent on 404 and can listen for creation

2

In the bit about live update, https://github.com/solid/solid-spec/blob/master/api-websockets.md we need to specify that you can subscribe to changes in a resource which currently does not exist, and get a ping when...

Authorization fails for protected image loaded from HTML img tag

3

#### Environment ```$ npm --version 8.12.1 $ community-solid-server --version 4.0.1 $ node --version v16.13.0 ``` #### Description The images in my contacts contact cards don’t show up when running CSS....

When I go back to an app which has been logged in for a while, I get 401 errors again

6

#### Environment $ community-solid-server --version 4.0.1 $ node --version v16.13.0 #### Description When I go back to an app which has been logged in for a while, like over 24...

Renegotiate TLS -- allow public access with no cert

1

The server currently asks for a certificate even if it is serving a public page. It should (like node-solid-server now) only ask for a cert when a protected page is...

After the cert has been issued, what then?

1

I just created a new account, timbl-workspace-test, on databox.me  When I was done, "You're all set" was basically nice, but there was no...

Turtle files should not be parsed and re-serialized on GET

5

Turtle files should not be parsed and re-serialized (unless you have to convert format) on GET because: - It takes time to do, - people also may want to save...

After the following HTTP response to a cross-origin request,, ``` Accept-Patch:application/json, application/sparql-update Accept-Post:text/turtle, application/json Access-Control-Allow-Credentials:true Access-Control-Allow-Origin:http://localhost:3080 Access-Control-Expose-Headers:User, Location, Link, Vary, Last-Modified, WWW-Authenticate, Content-Length Access-Control-Max-Age:1728000 Allow:OPTIONS, HEAD, GET, PATCH, POST, PUT,...

Remove sniffing

1

Sniffing mime types is a error-prone and nasty way to work, and opens up the system to security attacks. The server should keep track of the mime type of data...

```$ curl -I https://timbl.databox.me/solid/issues/chat.ttl HTTP/1.1 401 Unauthorized Accept-Patch: application/json, application/sparql-update * Accept-Post: text/turtle, application/json \* Access-Control-Allow-Credentials: true * Access-Control-Expose-Headers: User, Location, Link, Vary, Last-Modified, WWW-Authenticate, Content-Length Access-Control-Max-Age: 1728000 Allow: OPTIONS,...

Schema.org is inconsistent about http and https in URIs for terms

3

The policy in Solid has so far to leave all the historical namespaces at ` http://www.w3.org/` and Dublin Core etc `http:` space, and just to actually fetch the ontology from...