
<file>
*------------------- NOTICE - NOTICE - NOTICE --------------------*
|                                                                 |
| You are accessing a community-operated system that is provided  |
| for secure communication.                                       |
|                                                                 |
| - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - |
|                                                                 |
| Fire up your IRC client and connect to irc.darkfasel.net        |
| or drkfslfpvsiuq5nf.onion, port 6697 or 9999, TLS only,         |
| currently signed by CAcert.                                     |
|                                                                 |
| - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - |
|                                                                 |
| Please verify the certificate fingerprints!                     |
|                                                                 |
| We use DNSSEC and DANE, please use a validating client:         |
| https://github.com/irssi/irssi/commit/d826896f74925f2e77536d69a |
|                                                                 |
| ... or check the fingerprints manually:                         |
|   % dig . DNSKEY | grep -Ev '^($|;)' > root.keys                |
|   % dig +short +noall +sigchase +trusted-key=./root.keys \      |
|     -tTLSA _6697._tcp.irc.darkfasel.net.                        |
|                                                                 |
| - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - |
|                                                                 |
| Connections between the servers are additionally secured with   |
| VPN tunnels using salsa2012+umac+ec25519-fhmqvc based on fastd  |
| or curve25519xsalsa20poly1305 with quicktun.                    |
|                                                                 |
| - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - |
|                                                                 |
| Cloak: To protect our users privacy, host names are scrambled   |
| by default. To reveal your real host name, unset usermode -x:   |
|   /mode yournick -x                                             |
|                                                                 |
| - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - |
|                                                                 |
| A https-only web client is available at:                        |
|   https://webirc.darkfasel.net/                                 |
|   https://drkfslfpvsiuq5nf.onion/                               |
|                                                                 |
| - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - |
|                                                                 |
| Though every connection is encrypted, it is up to the user to   |
| ensure she isn't intercepted by a Man-In-The-Middle or leaks    |
| private conversation data by other means.                       |
| You have to trust your conversation partner she does everything |
| right. This is also true for conversations with many partners.  |
| We just try to provide communication infrastructure that makes  |
| secure communication possible in all conscience and knowledge.  |
| We can't be held liable for any harm that results in using or   |
| misusing this service.                                          |
|                                                                 |
| Use OTR! Use end-to-end encryption wherever possible!           |
|                                                                 |
*-----------------------------------------------------------------*
</file>