4 ms·

Did a double take when I saw this in irssi: 23:22:03 Looking up irc.freenode.net 23:22:03 Connecting to irc.freenode.net [127.0.0.1] port 6697 23:2

by chjj 13y ago

Did a double take when I saw this in irssi: 23:22:03 Looking up irc.freenode.net 23:22:03 Connecting to irc.freenode.net [127.0.0.1] port 6697 23:22:03 warning SSL handshake failed: Connection refused 23:22:03 Connection lost to irc.freenode.net

na85 13y ago
FYI using IRC over SSL is useless.
- jlgaddis 13y ago
  FYI, no, it's not and this stupid line of thinking is getting old. Just because the NSA can also connect to the server, join the same channels you're in, and see your conversations does not mean SSL is "useless". It's like saying that locking your car doors "is useless" because someone can just smash the window in.
  - na85 13y ago
    It's not stupid nor is your analogy apt. All it takes is one user not using SSL or not verifying certs for your chats to be vulnerable to eavesdropping.
    - q3k 13y ago
      As well as all it takes is one gmail user for your email conversation to be vulnerable to eavesdropping. Is this a reason to say SSL between your email client and server is useless?
      - na85 13y ago
        Straw man argument
- q3k 13y ago
  That is bullshit. SSL on IRC enables you to: - evade local packet inspection - ensure no local MITM is performed - log in to services via a client cert instead of a passphrase Please take your FUD elsewehere.
  - na85 13y ago
    Let me ask you something. What purpose, other than eavesdropping, is there for performing MITM on irc?
    - q3k 13y ago
      Probably not much. But it's nice to minimize attack surfaces and annoy arpspoofing skids which might be on your LAN.
    - yrro 13y ago
      Credential theft
    - hornetblack 13y ago
      Some people may reuse NickServ passwords for other more important things. Those passwords are just sent over plaintext.
- chjj 13y ago
  Even if it is, I have to identify with nickserv. I'd rather not do that in plaintext.