search

spoulson / Chatmore

Simplified web-based IRC client for PHP/Unix
17 stars 6 forks source link

SSL #103

Open volga629 opened 10 years ago

volga629 commented 10 years ago

Hello Everyone, Is possible make SSL connection for irc client from web server to irc server ?

Thank you Slava.

spoulson commented 10 years ago

Hello,

I've considered this, but I haven't figured a real good reason to. IRC is inherently insecure. Like email, anything sent to an IRC server/network is distributed among other servers and it could be in the clear, logged to files in the clear, etc.

Shawn Poulson shawn@ethn.net

On Apr 13, 2014, at 5:59 PM, volga629 notifications@github.com wrote:

Hello Everyone, Is possible make SSL connection for irc client from web server to irc server ?

Thank you Slava.

— Reply to this email directly or view it on GitHub.

volga629 commented 10 years ago

Hello, Reason can be very simple. For example NickServ for freenode is identify users, password in clear text. Another example distributed IRC where vip public ip and then it sends traffic based SRV record over the wan which usually require SSL to minimize chance for attack and unnecessary service discovery on irc server.

Slava.

spoulson commented 10 years ago

Sure, SSL can help obscure private messages. But, my point is it won't provide solid security on an insecure platform.

Anyway, I'm not opposed to the idea. Having SSL is often better than not. I would like to work on a rewrite of Chatmore to solve some stability issues I've experienced at the socket level. However, my time is very limited, so I haven't been able to work on it.

I'm curious, though. How are you using Chatmore? Does it work well for you?

Shawn Poulson shawn@ethn.net

Hello, Reason can be very simple. For example NickServ for freenode is identify users, password in clear text. Another example distributed IRC where vip public ip and then it sends traffic based SRV record over the wan which usually require SSL to minimize chance for attack and unnecessary service discovery on irc server.

Slava.

Reply to this email directly or view it on GitHub: https://github.com/spoulson/Chatmore/issues/103#issuecomment-40331818

volga629 commented 10 years ago

Yes, I am using internally for support teams interaction. I found Inspireircd with atheme services plugin pack working quite well for bot (wiki information posting).