Scientist: Protected "DWBouncers:Security" ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite))

2026-05-14T19:48:03Z

Protected "DWBouncers:Security" ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite))

← Older revision		Revision as of 00:48, 15 May 2026
(No difference)

Scientist: Created page with "{{DWIRC_Guides}} = 🔐 DWBouncers: TLS & Security Info = This page provides detailed information about TLS, encryption, secure authentication, and connection security for all DWBouncers ZNC users. Proper TLS usage ensures privacy, prevents eavesdropping, and protects your ZNC and IRC accounts from unauthorized access. = 🔒 What Is TLS and Why It Matters = '''TLS (Transport Layer Security)''' encrypts your connection between: * Your IRC client ↔ ZNC server *..."

2026-05-14T19:47:11Z

Created page with "{{DWIRC_Guides}} = 🔐 DWBouncers: TLS & Security Info = This page provides detailed information about TLS, encryption, secure authentication, and connection security for all DWBouncers ZNC users. Proper TLS usage ensures privacy, prevents eavesdropping, and protects your ZNC and IRC accounts from unauthorized access. = 🔒 What Is TLS and Why It Matters = '''TLS (Transport Layer Security)''' encrypts your connection between: * Your IRC client ↔ ZNC server *..."

New page

{{DWIRC_Guides}}

= 🔐 DWBouncers: TLS & Security Info =

This page provides detailed information about TLS, encryption, secure authentication, and connection security for all DWBouncers ZNC users.
Proper TLS usage ensures privacy, prevents eavesdropping, and protects your ZNC and IRC accounts from unauthorized access.

= 🔒 What Is TLS and Why It Matters =
'''TLS (Transport Layer Security)''' encrypts your connection between:

* Your IRC client ↔ ZNC server
* ZNC server ↔ IRC network (irc.darkworld.network)

TLS prevents:

* Password theft
* Session hijacking
* ISP monitoring
* Man-in-the-middle attacks
* Public Wi-Fi interception

All DWBouncers users '''must''' use TLS on both sides of the connection.

= 🔐 TLS Ports & Connection Details =

== 📡 ZNC TLS Port ==
Use the SSL/TLS port for secure ZNC access:

* *'''ZNC SSL Port:''' <code>31337</code>

Example IRC client setup:
<code>
Server: bouncers.darkworld.network
Port: 31337
SSL: Enabled
</code>

== 🌐 WebAdmin TLS URL ==
ZNC WebAdmin is also protected by HTTPS:

* '''Primary WebAdmin (TLS):'''
➜ https://bouncers.darkworld.network:31337

Do not use insecure or http-only alternatives except for the '''password reset page''' (1337) when required.

= 🔑 TLS for IRC (DarkWorld Network) =

To connect securely to the main network:

* '''IRC SSL Port:''' <code>+6697</code>
* '''Server:''' <code>irc.darkworld.network</code>

Your client should display one of the following when TLS is active:

* “TLS secured”
* “Connection protected”
* “SSL handshake completed”

If it does not — your connection is '''not encrypted'''.

= 🧬 SASL Authentication (Highly Recommended) =

SASL ensures your NickServ password is transmitted '''encrypted inside TLS''', preventing credential leaks.

Supported SASL mechanisms:

* <code>PLAIN</code> (recommended over TLS)
* <code>EXTERNAL</code> (if you use client certificates)

To enable SASL for ZNC:

# Open '''ZNC WebAdmin'''
# Go to your network → '''Username / NickServ settings'''
# Enable '''SASL PLAIN'''
# Enter your NickServ username & password
# Save and reconnect

This ensures instant and secure identification on every reconnect.

= 📜 Certificate Information =
The DarkWorld Bouncers system uses:

* Modern TLS versions (1.2 / 1.3)
* Strong ciphers
* Valid certificates signed by a trusted CA

You do '''not''' need to install custom certificates — all standard IRC clients support them.

If your client asks to trust or verify a certificate:

'''Always choose: “Allow / Trust”'''

You may also download certificate details from:
➡️ https://bouncers.darkworld.network

= 🔎 How to Check if You Are Using TLS =

== 🖥️ Desktop (Textual, HexChat, LimeChat) ==
Check the server connection log.
Look for:

* “Connected via TLS”
* “Using SSL”
* A lock icon near the server

== 📱 IRCCloud ==
TLS is always enabled.

== 🔧 ZNC Debug Logs ==
Open '''ZNC → Logs → Network logs''' and search for:

<code>[connection] TLS negotiated</code>

If this line is missing, TLS is not enabled.

= 🚫 TLS Misconfiguration & Security Risks =
Avoid these mistakes:

* ❌ Connecting to port '''6667''' without SSL
* ❌ Using VPNs, other BNC/ZNCs, or proxies
* ❌ Disabling certificate verification
* ❌ Using plaintext NickServ identify in client scripts
* ❌ Allowing unencrypted clients to connect

Such misconfigurations can expose your password, IP, and conversations.

= 🛡️ Best Practices for Maximum Security =

== ✔ Always do this ==
* Use SSL/TLS on port 31337
* Enable SASL authentication
* Use strong passwords
* Keep your NickServ email confirmed
* Use the '''!keep''' system every 2 weeks
* Stay updated on Terms of Service:
➜ https://bouncers.darkworld.network/terms/

== ❌ Never do this ==
* Use unencrypted ports
* Share your ZNC or NickServ password
* Request a ZNC from VPN/BNC/IRCCloud
* Change the ZNC realname
* Run abusive scripts or spam bots
* Stay inactive for 12+ days (account removed)

= 🆘 Need Help? =
If you need assistance setting up TLS, SASL, or secure connections:

Join: '''#DWBouncers'''
Provide:
* Your ZNC username
* Your IRC client
* The exact error message

Staff will help you resolve any security-related issues.

'''See also:'''
[[DWBouncers:ZNC Webadmin]] • [[DWBouncers:Keep System]] • [[DWBouncers/Clients]] • [[DWIRC:Security & SASL Auth]]

{{DWFooter}}

DWBouncers:Security - Revision history

Scientist: Protected "DWBouncers:Security" ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite))