4 ms·
SSL certs from existing CAs can be used for anything, not just HTTPS.
by raimue 11y ago
SSL certs from existing CAs can be used for anything, not just HTTPS.
- blibble 11y agojust no clients check it, or check it properly
- raimue 11y agoBrowsers also used to allow you to simply override invalid SSL certificates. Over time, it became more difficult and finally it is not even possible anymore when the server sent HSTS headers before. The current draft for IRCv3.3 of the IRCv3 working group already has a draft for Strict Transport Security, see http://ircv3.net/specs/core/sts-3.3.html http://ircv3.net/specs/core/sts-3.3.html We need the same culture shift in IRC clients that took place in browsers. Every IRC client should take certificate validation serious and do it properly. For that to happen, we need more SSL-enabled IRC servers and users that want to use it.