Re:Freenode IRC is down
by na85 on Monday February 03, 2014 @01:37AM
(#7169189)
FYI using IRC over SSL is useless.
[ Parent
| on HN ]
FYI, no, it's not and this stupid line of thinking is getting old.
Just because the NSA can also connect to the server, join the same channels you're in, and see your conversations does not mean SSL is "useless".
It's like saying that locking your car doors "is useless" because someone can just smash the window in.
It's not stupid nor is your analogy apt.
All it takes is one user not using SSL or not verifying certs for your chats to be vulnerable to eavesdropping.
As well as all it takes is one gmail user for your email conversation to be vulnerable to eavesdropping.
Is this a reason to say SSL between your email client and server is useless?
Straw man argument
That is bullshit. SSL on IRC enables you to:
- evade local packet inspection
- ensure no local MITM is performed
- log in to services via a client cert instead of a passphrase
Please take your FUD elsewehere.
Let me ask you something.
What purpose, other than eavesdropping, is there for performing MITM on irc?
Probably not much. But it's nice to minimize attack surfaces and annoy arpspoofing skids which might be on your LAN.
Re:Freenode IRC is down
by hornetblack on Monday February 03, 2014 @04:09AM
(#7169590)
Some people may reuse NickServ passwords for other more important things. Those passwords are just sent over plaintext.
Credential theft