3 ms·
I happen to like nickserv's UX. There are far worse UIs on the web. Simple is good.
by xfitm3 5y ago
I happen to like nickserv's UX. There are far worse UIs on the web. Simple is good.
- Macha 5y agoThe fact that nickserv is just another user and you can't be sure the network had taken precaution to avoid another using swiping the name in the event of a services outage is a problem. Add to that the (now admittedly rare) networks that don't use any form of nickserv and the phishing potential for users that don't realise that
- xfitm3 5y agoThe hostname mask is used to authenticate users. If someone can impersonate a hostname mask there are bigger problems. Nicknames are ephemeral. It is designed to be this way. You can use SASL and connect with a certificate to give yourself a fingerprint to validate your identity. It's fun and simple. Don't throw out the baby with the bathwater.
- Macha 5y agoHowever, people or their clients use /msg NickServ. The passwords are sent to something identified by a nick only. I don't believe you if you claim people are doing a /who NickServ and checking the hostname mask first. SASL is definitely an improvement over NickServ.
- xfitm3 5y agoI use SASL to authenticate with NickServ on Freenode. My IRC client automatically looks up the hostname of users I message.
- proactivesvcs 5y agoYou can, because a server can reserve nicknames via a configuration directive. Many ircds also allow the /NICKSERV command.