Demystifying Security on ZenDenPen IRC: Encryption, IP Cloaking, and More

IRC is Ephemeral by default, meaning that messages and state are not stored.

IRC has evolved and improved since 1988. All current protocols we use today where at one time INSECURE. Email, HTTP, etc.
As the internet grew, they all improved and added necessary security features.

Security

ZenDenPen IRC uses TLS (SSL) certificate encryption to ensure security. Meaning that your connection is encrypted so no one can eavesdrop on what you type/discuss.
We've disabled plaintext connections, there are multiple improvements to this security context see SASL STS (Strict Transport Security), SNI

IP Cloaking

As IRC is ephemeral and anonymous, servers used to show IP's of users. This is no longer the case with IP Cloaking (IP's are hidden) and only the server knows the real IP.

How it worked in the past:
When someone was disruptive, dangerous or abusive to the conduit of the network or channels, BANS (temporary or extended) where issued based on IP/NICKNAME of that person.

You can use the cloaked HOST to ban someone now.
PLus, there's the added feature of VHOSTS - virtual hosts which look nice:)

YOU NEED TO BE SECURITY CONSCIOUS

DO NOT UNDER ANY CIRCUMSTANCE run code from untrusted sources. Do not copy/paste commands from strangers in to the WebChat

Running untrusted code/programs is the number one security concern which affects all security. It doesn't matter how well everything else is secured..

Of course security is extremely complex, however currently we use the best security standards!

Security is also about keeping yourself safe, you can use the most complex secure system online, but the human factors are always those who can make or break security.

If your PC/mobile has a virus/trojan then all security is compromised. Keep safe!