Join Nostr
2026-09-05 07:12:20 UTC

Social coding commons on Nostr: An article was submitted to HN how #Authorization terminology is a mess and proposed ...

An article was submitted to HN how #Authorization terminology is a mess and proposed a way to fix it.

Top-level comment started a discussion on the difference between SHOULD and OUGHT TO. The latter expresses a moral imperative.

SHOULD is defined in #RFC2119 which is referenced in all #ActivityPub specs and #FEPs.

Now, there is an April Fool's RFC6919 which defines OUGHT TO. While this RFC is created just for fun, to express all kinds of wriggle room to a spec, which is often the reality in a codebase, the OUGHT TO indicator is not all that bad for actual use in #fediverse specs.

The fediverse is more than cold, hard technology space. It is a place where particular values and principles are held dear, moral imperatives to build better alternatives to social media.

An ought combines with a should like this:

"Privacy OUGHT TO be protected first and foremost, therefore an opt-in mechanism SHOULD be provided"

https://idpro.org/authorization-terminology-is-a-mess-lets-fix-it/

https://news.ycombinator.com/item?id=49522367

https://www.rfc-editor.org/rfc/rfc6919.html#page-4