Many of you may have seen that various IRC networks are now offering SSL connections as a means of connecting to their network. When seeing this, you may have wondered what SSL is, why would you want to use an SSL connection just for chatting, and even if you do want to use an SSL connection to chat, how do you go about it.
Let's start with a brief explanation as to what SSL is and why you may wish to utilize this technology when chatting via IRC. SSL stands for Secure Socket Layer, which is a protocol developed by Netscape for transmitting private documents via the Internet. SSL works by using a private key to encrypt data that is transferred over the SSL connection. Both Netscape and Internet Explorer support SSL, and many websites use this protocol to obtain confidential information and user information, such as credit card information. The definition of SSL quoted here was obtained from http://www.webopedia.com/TERM/S/SSL.html in case you would like further information. If I was to offer an explanation of SSL in my own terms, it would be that information is encrypted from point A to point B over the Internet, and unless someone has the key to decrypt this information or are a part of this communication, they will not be able to read it.
Ok, that was a basic explanation as to what SSL is and what it does. Now please understand that without the use of something like SSL,any IRC communication that occurs is passing over the Internet in pure text form, just like your reading now and that anyone with the correct software could snoop in on this conversation and learn everything that you say. Considering the fact that there are always items in the news that this virus has been released, this web site/business ddos'd attacked, or personal identity theft occurred to this person, you know the people out there are trying to do this. You may think, what am I saying on IRC that has any relevance to any of this? Most networks now run some types of services to guard your nicks (NickServ) and channels (ChanServ). This requires you sending password information over the Internet to services (password theft). Being a long time chatter myself, I've made good friends on IRC with various people, many that I communicate with in other ways besides IRC. I've exchanged phone numbers, e-mails, our real names and addresses(identify theft). You have a business in which you use IRC for communicating over long distances to save in expenses. Privileged company information is discussed that should not be seen by other people(your underbid, and never knew how). It's a privacy issue no matter what the circumstance. It's nobody's business but yours and the person/service that you are communicating with.
Now as to the how SSL works on IRC. First, the IRC network that you are chatting on must offer SSL connections. This information can usually be found in either the MOTD when you join or on the network official web page. The information that you are looking for is what servers offer SSL and what ports you must connect to on that server for an SSL connection to be established. Currently, the standard ports for SSL connections are 994 and 25401. If you do not find this information in either of these two places, ask your friendly IRCop. They may still be in a testing phase and not have posted it, or felt that not enough people was interested to initiate SSL connections. If the network offers multiple servers that allow for SSL connections, be sure to ask that if each server is set up to both listen to each other in SSL along with the clients that are chatting. If the SSL servers are not set this way, your conversation will only be encrypted part of the way to the person you are chatting to and that is not what you are trying to achieve. Remember my explanation of SSL, encrypted from point A to point B?
Speaking of from point A to point B, don't forget services. The server that runs services should also be set up to correctly receive and send information via SSL.
You've now found a network that offers SSL connections that encrypts the conversations completely from point A to point B, as long as they are on the correct servers and connected via SSL. You, as an individual, need a chat client that is able to understand all of this and connect to the server's SSL port. The following is a list of various chat clients that offer this, which I am sure, is not a complete list: irssi, KVirc, Konversation, XChat, gaim, Ksirc, and the latest version of mIRC(6.14). Be sure to read all the instructions both on the chat client web page and in their help files to determine what special set up must be done. Some clients may require that OpenSSL be installed on the machine you are chatting from, and others may have this bundled in the program itself. Do not despair though if you must install OpenSSL, this is free software and fairly easy to set up. Also, if your favorite chat client is not set up to communicate via SSL, you may still be able to chat via SSL with something called Stunnel. From the reading I have done though, you may find it easier just to find a chat client that is already set up to allow for SSL connections and communication.
After reading all of this, you must be thinking that this seems like a whole lot of work to make sure my IRC conversations are secure. You also may be wondering, what happens if the person I am chatting to is not using this technology even if I do go to all this trouble. Remember, if they are a part of the conversation, they can read it. But, as to the why you would want to do this. Well, sit back and think about this. How many of us would have thought of having a Virus checker as standard PC operating software on our home computer a couple years ago? Even if you don't have a firewall running on your PC as of yet, you should. How many know what it is and the fact that it is there to protect the privacy of your PC from outside intrusion attempts? I look at SSL as just another tool such as those to protect my privacy and the privacy of my child from the unknown individuals out there that would exploit anything they could. I think more and more people will too in the future as this technology becomes more readily available to them.
? Discuss This Article here.
|