Method of communication for meetings

biolizard89
Posts: 2001
Joined: Tue Jun 05, 2012 6:25 am
os: linux

Re: Method of communication for meetings

Post by biolizard89 »

phelix wrote:
biolizard89 wrote:
phelix wrote:What about http://www.darkscience.net/ ?

It is somewhat scary that it is so difficult to find a good communication channel.
Their website isn't using a trusted TLS cert, so there's no way to know if the IRC server info on that website is authentic.
SSL
Our server’s only accept SSL connections, you MUST enable SSL to connect. Our server’s certificates are signed by CAcert. You can find the root certificate at CAcert, these certificates are usually included with a ca-certificates package

Tor
You can connect to Dark Science using our tor hidden service with the address darksci3bfoka7tw.onion . Alternatively the DNS record tor.irc.darkscience.net will resolve to a tor hidden service.
The IRC daemon might have trusted TLS (I haven't checked), but their website definitely doesn't. So any addresses listed on that website are not trustworthy.
Jeremy Rand, Lead Namecoin Application Engineer
NameID: id/jeremy
DyName: Dynamic DNS update client for .bit domains.

Donations: BTC 1EcUWRa9H6ZuWPkF3BDj6k4k1vCgv41ab8 ; NMC NFqbaS7ReiQ9MBmsowwcDSmp4iDznjmEh5

domob
Posts: 1129
Joined: Mon Jun 24, 2013 11:27 am
Contact:

Re: Method of communication for meetings

Post by domob »

My personal opinion is that CAcert is "good", even though it is not trusted by most browsers by default. For someone who cares about security, it should be relatively easy to import the CAcert root (I've done so) and be sure they got the correct one. Debian shipped the cert trusted by default for some time, but stopped doing so lately. The certificate can still be installed from their package repository, I think.
BTC: 1domobKsPZ5cWk2kXssD8p8ES1qffGUCm | NMC: NCdomobcmcmVdxC5yxMitojQ4tvAtv99pY
BM-GtQnWM3vcdorfqpKXsmfHQ4rVYPG5pKS
Use your Namecoin identity as OpenID: https://nameid.org/

biolizard89
Posts: 2001
Joined: Tue Jun 05, 2012 6:25 am
os: linux

Re: Method of communication for meetings

Post by biolizard89 »

domob wrote:My personal opinion is that CAcert is "good", even though it is not trusted by most browsers by default. For someone who cares about security, it should be relatively easy to import the CAcert root (I've done so) and be sure they got the correct one. Debian shipped the cert trusted by default for some time, but stopped doing so lately. The certificate can still be installed from their package repository, I think.
The website in question has a TLS certificate that doesn't even have the website's domain name in its CN/SAN. The CA it uses is of secondary concern.
Jeremy Rand, Lead Namecoin Application Engineer
NameID: id/jeremy
DyName: Dynamic DNS update client for .bit domains.

Donations: BTC 1EcUWRa9H6ZuWPkF3BDj6k4k1vCgv41ab8 ; NMC NFqbaS7ReiQ9MBmsowwcDSmp4iDznjmEh5

phelix
Posts: 1634
Joined: Thu Aug 18, 2011 6:59 am

Re: Method of communication for meetings

Post by phelix »

Why is it important to know who operates the IRC server? All communication is public anyway.
nx.bit - some namecoin stats
nf.bit - shortcut to this forum

biolizard89
Posts: 2001
Joined: Tue Jun 05, 2012 6:25 am
os: linux

Re: Method of communication for meetings

Post by biolizard89 »

phelix wrote:Why is it important to know who operates the IRC server? All communication is public anyway.
Among probably other things, an impostor IRC server could impersonate users.
Jeremy Rand, Lead Namecoin Application Engineer
NameID: id/jeremy
DyName: Dynamic DNS update client for .bit domains.

Donations: BTC 1EcUWRa9H6ZuWPkF3BDj6k4k1vCgv41ab8 ; NMC NFqbaS7ReiQ9MBmsowwcDSmp4iDznjmEh5

phelix
Posts: 1634
Joined: Thu Aug 18, 2011 6:59 am

Re: Method of communication for meetings

Post by phelix »

biolizard89 wrote:
phelix wrote:Why is it important to know who operates the IRC server? All communication is public anyway.
Among probably other things, an impostor IRC server could impersonate users.
lol, I had expected identification would be between users.
nx.bit - some namecoin stats
nf.bit - shortcut to this forum

Post Reply