#5ftf — Public Fediverse posts

During #WCEU, many gathered to discuss Five for the Future #5ftf with actionable outcomes. We intentionally moved from “what’s wrong” to “what do we want to see moving forward”. Have a read, and comment on the post. #WordPress #opensource

https://make.wordpress.org/project/2025/06/17/five-for-the-future-wceu25-chat/

We explore all options. While we keep losing valued contributors. We see and hear them. We keep hoping that one day they can return to a more robust, powerful and sustainable #WordPress #OSS Project.

We keep asking to demand the probably most efficient and reasonable way forward: an independent, transparent, and strong WPFoundation. For a solid #5ftF that cannot be weaponized.

Consider co-signing https://wpmustwin.org
Consider supporting any exploration you see.

#WPDrama #WeAreWordPress 💜

I’d like to see (at least) 5 big hosting companies to start a five-for-the-foundation program to fund an organisation for the infrastructure of the #WordPress community.

#5ftf

Let’s make #WordPress better together! #5ftF

📈 Check out the dashboards and share your thoughts:
➡️ Core Team Dashboard
➡️ Training Team Dashboard
➡️ Community Team Dashboard
➡️ WP 6.6 Release Stats

Let’s keep pushing #OpenSource forward! ✨ #5ftF #WordPress

🌍 The Community Team is almost back to pre-COVID levels, with unique attendees at WordPress events reaching 44.76%.

But, they need more event hosts to hit their ambitious participation goals! 🌱 #5ftF

🎓 The Training Team is on fire! 🔥 With almost 60% course enrollment and 50% video retention rates, they’ve exceeded goals for the Learning Pathways project. #LearnWP

But they need more consistent contributors to maintain long-term growth. 🚀 #5ftF

🔍 The Core Team dashboard highlights a steady 637 contributors for WP 6.6, with 38% being new!

However, there’s a concerning trend—more contributors are becoming inactive in 2024.

Key sponsors like Automattic, Yoast, GoDaddy, and 10up are keeping things moving! #5ftF

📊 Exciting news from the #WordPress community!
We’ve launched experimental contribution health dashboards to track progress across Core, Community, and Training teams, inspired by feedback from @WordCampEurope 2023. #5ftF

https://make.wordpress.org/project/2024/09/12/wordpress-contribution-health-dashboards-an-experiment/

This Week in Make #WordPress:
https://poststatus.com/2fa-on-plugin-theme-authors-by-oct-1-roadmap-to-wp-6-7-wp-6-6-2-rc1-5ftf-redesign-twenty-twenty-five/
🔒 2FA on Plugin & Theme Authors by Oct 1
🗺️ Roadmap to WP 6.7
🚀 WP 6.6.2 RC1
🎨 #5ftF Redesign
👩🏽‍🎨 Twenty Twenty Five

ThemeIsle is awesome! They contribute to the #WordPress project in a variety of ways, including sponsoring 5h/week of my WordPress contribution time, via Five for the Future #5ftF. Learn more about Themeisle and their products by reading my blog post
https://patriciabt.com/blog/thank-you-themeisle/

🔄 Reorganizing initiatives in #WordPress: Should #DEIB, #5ftF, and Mentorship move to the Sustainability team?
🌱 How can we educate that Sustainability is broader than just the environment, including social and economic issues?
🌍 https://make.wordpress.org/updates/2024/06/28/addressing-overlapping-initiatives-and-improving-collaboration-across-teams/

This week in Make #WordPress
5️⃣ Five for the Future Documentation #5ftF
🎨 Core Editor Improvements
🌐 Preferred Languages Plugin
🔧 HTML API Development
🚀 WP 6.6 Roadmap, Early Testing
https://poststatus.com/early-opportunity-to-test-wp-6-6-wp-6-5-3-released-5ftf-documentation-core-proposals/

I had a great time participating in the 2nd WP-CLI Hack Day today.

I’ve been a longtime advocate for the tool, so it felt great to spend some time learning its internals and contributing some code to it.

It was also my first time writing #Behat tests, which kinda feels like magic.

https://make.wordpress.org/cli/2023/11/11/twenty-one-merged-prs-for-wp-cli-hack-day-2023/

#WordPress #5FTF

Ok, back to the ActivityPub plugin, today's work order includes processing remote deletes, and testing/updating the Signature Verification for hs2019 support. And a few other things if time permits!

#WordPress #5ftf

I made a contribution to WordPress core this afternoon, adding unit tests and writing testing instructions to someone else's patch.

It's not fun work, but it needs to be done to move tickets forward.

#WordPress #5FTF #OpenSource

TLDR: Without signature verification, sites using the plugin are wide open to impersonation attacks.

I’ve been developing federated comments for the ActivityPub plugin, but before getting it merged, I thought it was essential to implement HTTP Signature Verification.

Why?

Because without signature verification, ActivityPub servers would be wide open to impersonation attacks.

How does it Work?

Server to server federation is authenticated using HTTP Signatures in conjunction with the signing key from the actor’s publicKey field. The keyId should link to the actor so that the publicKey field can be retrieved. At minimum, the digest field should be included in the set of headers being signed.

https://www.w3.org/wiki/SocialCG/ActivityPub/Authentication_Authorization#Signing_requests_using_HTTP_Signatures

Trust & Safety

One feature I was keen support is Authorized Fetch, this is a privacy feature that requires remote servers fetching content to also provide HTTP signatures, thereby preventing unauthorized or blocked servers from accessing public posts (at least over the protocol).

While developing support for Authorized fetch, I realized we could make also support an Application actor, which lead to how we could also have a blog-wide actor. Which was a much requested feature!

When developing this feature you will likely be doing so from a local machine and using some type of tunnel, such as ngrok, also its hard to tell what type of setup your software will be deployed on, so don’t forget to include a check for x_original_host header

Special thanks again to @mikedev for providing a starting point to the signatures code. To @pfefferle for helping the PR over the finish line with Tests

Also to WDS for supporting a part of this work via #5ftf

#5ftf

Today I’m going to be updating my Federated Comments PR for the ActivityPub plugin

#wordpress #5ftf

Looking forward to Friday’s #5ftf, going to continue the Federated Comments PR for WordPress ActivityPub

Eager to dog food it i my site again!

Back to work on the #WordPress #ActivityPub plugin today for #5ftf!

While the rest of the WebDevStudios team has #5FTF today, I was lucky enough to be at #WCUS Contributor Day yesterday, where I started chasing a WP CLI bug and ended up opening this WordPress core ticket and creating a patch.

https://core.trac.wordpress.org/ticket/59198

#5ftf working on a new #WordPress plugin ;-)

My #WCMontclair slides for "We are They: Fostering Belonging as a #WordPress Contributor" https://courtneyr.dev/presentation/we-are-they/ #DEIB #5ftF: https://courtneyr-dev.micro.blog/2023/06/24/my-wcmontclair-slides.html

At WebDevStudios, we dedicate one day every month to working on open source. Today I created this Chrome extension to load the last modified date when viewing a #WordPress post.

https://github.com/salcode/chrome-ext-wp-modified/

#5FTF

#ActivityPub development, is parsing through specs, draft specs, forums, and then going to matrix for interop questions.

Thankfully some folks have organized a public space linking all the projects
https://matrix.to/#/#activitypub-community:codelutin.com

#WordPress #5ftf

🛫 First trip of the next crazy six weeks: let’s go to Paris and meet the amazing Weglot people #5ftF #WCEU

After it: WordCamp Barcelona, WordCamp Lisboa… and Athens!

Working on #WordPress #ActivityPub today.

Learning how to write unit test cases. 😅

#5ftf

Working on #Wordpress #ActivityPub today for #5ftf

Happy to be working on Wordpress-ActivityPub plugin today for #5ftf

Looking forward to #5ftf tomorrow!

#wordpress #activitypub