On: IRCv3 Spec round-up

[intricatedetail]

No end to end encryption? It should be default at least for private messages.

[raspyberr → intricatedetail]

What's the point of E2E in a public chatroom? If there's no restriction to enter anyone could just put a bot in that logs everything everyone says.

[intricatedetail → raspyberr]

You can have password protected rooms or host service on an untrusted platform. In a corporate environment lack of e2ee is a deal breaker.

[ViViDboarder → intricatedetail]

> In a corporate environment lack of e2ee is a deal breaker

Not in my experience. I would want a new hire to be able to search past history for context and to many businesses like to monitor the chats.

Keep in mind, IRC would generally be hosted by the business themselves so they’d have full access to the data. Why would that business want to hide their employees messages from themselves?

[intricatedetail → ViViDboarder]

It is rare these days that company actually has their own physical server room and "cloud" by default is not secure - you have to rely on cloud company security and integrity. I am thinking of that kind of scenario, however if you control who can access the servers then it may not be necessary.

[ViViDboarder → intricatedetail]

Even still, e2ee isn’t desirable in the industry. See Slack and Teams, the most popular IRC replacements used in the corporate world. Neither are e2ee.

[progval → intricatedetail]

OTR <https://otr.cypherpunks.ca/> is the de-facto standard for encryption on IRC. It's also quite old, so it predates IRCv3.

[johnisgood → intricatedetail]

Yeah. Welp, you can still use OTR.