Ryan McCue
@rmccue.io
1.2K followers 240 following 130 posts
Director of Product at @humanmade.com, building @altis.cloud. Created http://api.wordpress.org, co-chair @fair.pm.
Posts Media Videos Starter Packs
Reposted by Ryan McCue
therepository.email
New FAIR 1.0 Release Brings Decentralized Package Management to WordPress
www.therepository.email
Reposted by Ryan McCue
loopconf.com
Don't sleep on this opportunity! Contact @rzen.net and join us on 25 Sept!
rzen.net
If you want to come to @loopconf.com and the ticket cost is the only thing standing in your way, please reach out! I will make sure we can meet your needs and include you in the event.

The ONLY reason I'm producing the event is to create opportunity for as many WP devs as possible, including you!
rzen.net
Hello fellow WordPress devs! If your schedule permits, I would be honored if you joined me for @loopconf.com on Sept 25th!

I personally curated the schedule and couldn't be happier about the diversity of perspectives and experiences we get to hear.

Check it out: loopconf.com
rmccue.io
Specifically, it's is_utf8_charset() which reads the blog_charset option.

Something that's also fascinating is that the charset option in the Reading settings will only show up if it's not already set to UTF-8 - I guess it's legacy support?
rmccue.io
Fun fact: esc_html() requires loading the WP database, since it's charset dependent.
rmccue.io
Re multiple directories, I think getting the directory to a "neutral" (multi-stakeholder?) host solves that problem, in the same way we don't need third-party backups for the DNS roots.
rmccue.io
The main thing there is performance, pulling the audit log data could require pagination and DID lookups are already relatively expensive in our flow (see also github.com/did-method-p...).

One option we talked about a little is that we could do validation in a labeler, making it opt-in.
Provide ability for bulk lookup · Issue #113 · did-method-plc/did-method-plc
We've got a situation where we want to revalidate ~100k DID documents on a regular basis. Right now, the PLC directory only supports single lookups of DIDs (or pulling down the whole history to red...
github.com
rmccue.io
(Also, the Bluesky client(s) you're using here use only the direct method fyi: github.com/bluesky-soci...)
github.com
rmccue.io
Indeed, although what's the threat model? If the threat is the PLC directory server, then loading the audit log from the server is no safer than the single endpoint - only mirroring it elsewhere and checking for inconsistency allows that.
rmccue.io
Might be a better question for @bnewbold.net & the Bluesky team on that, but I know there's tools to mirror the PLC directory, such as github.com/str4d/plc

(Note that we're using the single endpoint per spec, same as the official atproto identity package does.)
GitHub - str4d/plc: Key management for DID PLC identities
Key management for DID PLC identities. Contribute to str4d/plc development by creating an account on GitHub.
github.com
rmccue.io
Each DID method defines its usage; the spec for PLC DIDs is to use the public endpoint. The audit log allows verifying it, but that's more of an offline process (and allows mirroring it).

We're also planning on supporting web DIDs, and potentially other methods beyond that - same as Bluesky.
rmccue.io
eg for did:plc:afjf7gsjzsqmgc7dlhb553mv, the DID document is at plc.directory/did:plc:afjf... and the key is zQ3shsLDoduUAwJjcc93ktzeQPRMghThq7LPEcsauSjgHpKZT
rmccue.io
You don’t need to parse the whole PLC audit log for operational usage, you can use the latest endpoint instead. The keys are encoded directly into the response in multibase. :)
rmccue.io
This isn’t quite right; the code for package signature checks is already in core, we just have to switch it on. It’s pending our server-side switch to Ed25519 before we do. It uses libsodium-compat, so should work on all hosts.

DAG-CBOR and multibase are byte encodings, no exts needed.
rmccue.io
The worst vegan/vegetarian food is anything pretending to be meat - just be good vegetables!

That said, honey roasted carrot with Tracklements (wholegrain) mustard ketchup would be delicious I bet.
rmccue.io
It’s fascinating seeing online arguments that, at the root, come down to people not understanding the difference between primary, secondary, and tertiary sources.
rmccue.io
Almost as bonkers as creating a temperature scale based on a mix of water, salt, and NH4Cl.
rmccue.io
I see someone was reading reddit today.
Reposted by Ryan McCue
loopconf.com
Early Bird tickets are now available for LoopConf, but only 50 of them!

loopconf.com

Register now for £299 (the lowest price ever for a LoopConf) and secure your spot in London on 25 September.

We can't wait to start sharing speakers with you!
WordPress Developer Conference – 25 September 2025 – London, UK
The premier conference for developers who choose WordPress.
loopconf.com