Skip to content

Deprecate STARTTLS #211

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Feb 2, 2019
Merged

Deprecate STARTTLS #211

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
d79d979
Deprecate STARTTLS
Jan 1, 2019
64f0123
Add guidance referencing rfc8314
lol768 Jan 11, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions _data/irc_versions.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -107,6 +107,7 @@ stable:
starttls:
name: starttls
description: tls Extension (STARTTLS)
deprecated: true
link: /specs/extensions/tls-3.1.html
caps:
- tls
Expand Down
24 changes: 13 additions & 11 deletions _irc/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -294,17 +294,6 @@ guidelines for clients and servers, allowing them to better detect the TLS
certificate to send based on the server's hostname.


## [STARTTLS]({{site.baseurl}}/specs/extensions/tls-3.1.html)

STARTTLS allows clients to upgrade their plaintext connections to use TLS
encryption. It is recommended that clients instead implement STS support when
that is ratified as a stable IRCv3 standard.

The [`tls` spec]({{site.baseurl}}/specs/extensions/tls-3.1.html) describes how
the `STARTTLS` command works, as well as how connection registration is changed
by the introduction of this capability.


## [Strict Transport Security (STS)]({{site.baseurl}}/specs/extensions/sts.html)

STS allows clients to be automatically upgraded to use TLS encryption and
Expand Down Expand Up @@ -357,4 +346,17 @@ these issues and overhaul the notification system, so we do not recommend
implementing this spec.


## [STARTTLS]({{site.baseurl}}/specs/extensions/tls-3.1.html)

STARTTLS allows clients to upgrade their plaintext connections to use TLS
encryption. In alignment with [RFC8314](https://tools.ietf.org/html/rfc8314),
it is recommended that IRC networks use listeners designed for implicit TLS (such
as those that operate on port 6697) and clients instead implement STS support.

The [`tls` spec]({{site.baseurl}}/specs/extensions/tls-3.1.html) is still
available for reference. It describes how the `STARTTLS` command works,
as well as how connection registration is changed by the introduction of
this capability.


{% include anchors.html %}