DWBouncers:Security

📘 DWIRC Guides & Tutorials

Guides

• Getting Started
• IRC Client Setup
• Mobile Connection Guide

Security

• Security & SASL Authentication

Channel Management

• Channel Management Tips

📚 Learn to Connect, Secure, and Manage Your IRC Experience

File:Dwirc-guides.png

🔐 DWBouncers: TLS & Security Info

This page provides detailed information about TLS, encryption, secure authentication, and connection security for all DWBouncers ZNC users. Proper TLS usage ensures privacy, prevents eavesdropping, and protects your ZNC and IRC accounts from unauthorized access.

🔒 What Is TLS and Why It Matters

TLS (Transport Layer Security) encrypts your connection between:

• Your IRC client ↔ ZNC server
• ZNC server ↔ IRC network (irc.darkworld.network)

TLS prevents:

• Password theft
• Session hijacking
• ISP monitoring
• Man-in-the-middle attacks
• Public Wi-Fi interception

All DWBouncers users must use TLS on both sides of the connection.

🔐 TLS Ports & Connection Details

📡 ZNC TLS Port

Use the SSL/TLS port for secure ZNC access:

• *ZNC SSL Port: 31337

Example IRC client setup: Server: bouncers.darkworld.network Port: 31337 SSL: Enabled

🌐 WebAdmin TLS URL

ZNC WebAdmin is also protected by HTTPS:

• Primary WebAdmin (TLS):

 ➜ https://bouncers.darkworld.network:31337

Do not use insecure or http-only alternatives except for the password reset page (1337) when required.

🔑 TLS for IRC (DarkWorld Network)

To connect securely to the main network:

• IRC SSL Port: +6697
• Server: irc.darkworld.network

Your client should display one of the following when TLS is active:

• “TLS secured”
• “Connection protected”
• “SSL handshake completed”

If it does not — your connection is not encrypted.

🧬 SASL Authentication (Highly Recommended)

SASL ensures your NickServ password is transmitted encrypted inside TLS, preventing credential leaks.

Supported SASL mechanisms:

• PLAIN (recommended over TLS)
• EXTERNAL (if you use client certificates)

To enable SASL for ZNC:

1. Open ZNC WebAdmin
2. Go to your network → Username / NickServ settings
3. Enable SASL PLAIN
4. Enter your NickServ username & password
5. Save and reconnect

This ensures instant and secure identification on every reconnect.

📜 Certificate Information

The DarkWorld Bouncers system uses:

• Modern TLS versions (1.2 / 1.3)
• Strong ciphers
• Valid certificates signed by a trusted CA

You do not need to install custom certificates — all standard IRC clients support them.

If your client asks to trust or verify a certificate:

Always choose: “Allow / Trust”

You may also download certificate details from: ➡️ https://bouncers.darkworld.network

🔎 How to Check if You Are Using TLS

🖥️ Desktop (Textual, HexChat, LimeChat)

Check the server connection log. Look for:

• “Connected via TLS”
• “Using SSL”
• A lock icon near the server

📱 IRCCloud

TLS is always enabled.

🔧 ZNC Debug Logs

Open ZNC → Logs → Network logs and search for:

[connection] TLS negotiated

If this line is missing, TLS is not enabled.

🚫 TLS Misconfiguration & Security Risks

Avoid these mistakes:

• ❌ Connecting to port 6667 without SSL
• ❌ Using VPNs, other BNC/ZNCs, or proxies
• ❌ Disabling certificate verification
• ❌ Using plaintext NickServ identify in client scripts
• ❌ Allowing unencrypted clients to connect

Such misconfigurations can expose your password, IP, and conversations.

🛡️ Best Practices for Maximum Security

✔ Always do this

• Use SSL/TLS on port 31337
• Enable SASL authentication
• Use strong passwords
• Keep your NickServ email confirmed
• Use the !keep system every 2 weeks
• Stay updated on Terms of Service:

 ➜ https://bouncers.darkworld.network/terms/

❌ Never do this

• Use unencrypted ports
• Share your ZNC or NickServ password
• Request a ZNC from VPN/BNC/IRCCloud
• Change the ZNC realname
• Run abusive scripts or spam bots
• Stay inactive for 12+ days (account removed)

🆘 Need Help?

If you need assistance setting up TLS, SASL, or secure connections:

Join: #DWBouncers Provide:

• Your ZNC username
• Your IRC client
• The exact error message

Staff will help you resolve any security-related issues.

See also: DWBouncers:ZNC Webadmin • DWBouncers:Keep System • DWBouncers/Clients • DWIRC:Security & SASL Auth

Part of the DarkWorld Network Wiki Project Maintained by the DarkWorld Wiki Team

DarkWorld Network — Building an Open, Secure, and Collaborative Internet Since 2021

🌍 Connect with Us: | | | | | |

Quick Links: 🏠 Home • 💬 DWIRC • 🔗 DWBouncers • 💻 DWShells • 📘 Tutorials • 📈 Stats • 🎮 Games • 🧭 Hosting

💡 Want to contribute? See How to Contribute and help build the DarkWorld knowledge base!

📅 Last Updated: 2025-11-18 • Content licensed under CC-BY-SA 4.0 unless otherwise noted.