Changes between Version 7 and Version 8 of doc/TorifyHOWTO/WeeChat


Ignore:
Timestamp:
Jun 3, 2018, 7:02:55 AM (6 months ago)
Author:
Jaruga
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • doc/TorifyHOWTO/WeeChat

    v7 v8  
    6767
    68681. First, enable TLS/SSL on your desired server with {{{/set irc.server.MyIRC-Tor.ssl on}}}.
    69 2. As self-signed certificates will not pass the verification test, you will need to perform one of the below:
    70  * Option 2 (not recommended): Disable certificate verification by entering {{{/set irc.server.MyIRC-Tor.ssl_verify off}}}. This can be '''dangerous''', as it will allow Weechat to connect using any certificate. This opens users up to [https://en.wikipedia.org/wiki/Man-in-the-middle_attack MitM attacks]. Step three must be followed.
     692. As self-signed certificates will not pass the verification test, you will need to disable certificate verification for the server by entering {{{/set irc.server.MyIRC-Tor.ssl_verify off}}}.
     70  * '''Note:''' Without following step 3 this can be '''dangerous''', as it will allow Weechat to connect using any certificate. This opens users up to [https://en.wikipedia.org/wiki/Man-in-the-middle_attack MitM attacks].
    71713. Enable fingerprints with the command {{{/set irc.server.MyIRC-Tor.ssl_fingerprint}}}. This will display the certificate every time you connect, allowing you to compare it with the official fingerprint to verify its authenticity.
    7272 * '''Important:''' Take note of the official certificate fingerprint. When you connect to the server with this option enabled, it will display the fingerprint of the certificate currently used in your connection. Ensure they match.