This shows you the differences between two versions of the page.
— |
motd [2015/04/09 16:41] (current) jomat created |
||
---|---|---|---|
Line 1: | Line 1: | ||
+ | <file> | ||
+ | *------------------- NOTICE - NOTICE - NOTICE --------------------* | ||
+ | | | | ||
+ | | You are accessing a community-operated system that is provided | | ||
+ | | for secure communication. | | ||
+ | | | | ||
+ | | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | | ||
+ | | | | ||
+ | | Fire up your IRC client and connect to irc.darkfasel.net | | ||
+ | | or drkfslfpvsiuq5nf.onion, port 6697 or 9999, TLS only, | | ||
+ | | currently signed by CAcert. | | ||
+ | | | | ||
+ | | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | | ||
+ | | | | ||
+ | | Please verify the certificate fingerprints! | | ||
+ | | | | ||
+ | | We use DNSSEC and DANE, please use a validating client: | | ||
+ | | https://github.com/irssi/irssi/commit/d826896f74925f2e77536d69a | | ||
+ | | | | ||
+ | | ... or check the fingerprints manually: | | ||
+ | | % dig . DNSKEY | grep -Ev '^($|;)' > root.keys | | ||
+ | | % dig +short +noall +sigchase +trusted-key=./root.keys \ | | ||
+ | | -tTLSA _6697._tcp.irc.darkfasel.net. | | ||
+ | | | | ||
+ | | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | | ||
+ | | | | ||
+ | | Connections between the servers are additionally secured with | | ||
+ | | VPN tunnels using salsa2012+umac+ec25519-fhmqvc based on fastd | | ||
+ | | or curve25519xsalsa20poly1305 with quicktun. | | ||
+ | | | | ||
+ | | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | | ||
+ | | | | ||
+ | | Cloak: To protect our users privacy, host names are scrambled | | ||
+ | | by default. To reveal your real host name, unset usermode -x: | | ||
+ | | /mode yournick -x | | ||
+ | | | | ||
+ | | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | | ||
+ | | | | ||
+ | | A https-only web client is available at: | | ||
+ | | https://webirc.darkfasel.net/ | | ||
+ | | https://drkfslfpvsiuq5nf.onion/ | | ||
+ | | | | ||
+ | | - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | | ||
+ | | | | ||
+ | | Though every connection is encrypted, it is up to the user to | | ||
+ | | ensure she isn't intercepted by a Man-In-The-Middle or leaks | | ||
+ | | private conversation data by other means. | | ||
+ | | You have to trust your conversation partner she does everything | | ||
+ | | right. This is also true for conversations with many partners. | | ||
+ | | We just try to provide communication infrastructure that makes | | ||
+ | | secure communication possible in all conscience and knowledge. | | ||
+ | | We can't be held liable for any harm that results in using or | | ||
+ | | misusing this service. | | ||
+ | | | | ||
+ | | Use OTR! Use end-to-end encryption wherever possible! | | ||
+ | | | | ||
+ | *-----------------------------------------------------------------* | ||
+ | </file> |