Secure (TLS) Connection

Why TLS?

On a TLS connection your messages and your password are encrypted in transit. Someone else on the same network — shared wifi, a school or office connection — cannot read your traffic.

On Yudum, TLS is not optional. It is the only way to connect: the plain-text port is closed. A client that does not support TLS cannot join the network.

The port

The + in front of the port number means TLS; most IRC clients understand that notation.

mIRC

/server +irc.yudum.net:6697

To save it: Alt+E → Servers → select the server → Edit → set the port to 6697 and tick SSL.

HexChat

1. Ctrl+S opens the Network List; select Yudum and click Edit.
2. Set the server line to irc.yudum.net/+6697.
3. Tick Use SSL for all servers on this network.

irssi

/connect -tls irc.yudum.net 6697

WebChat

WebChat is already encrypted end to end — there is nothing to configure.

Certificates

Our servers use Let's Encrypt certificates. If your client says the certificate could not be verified, it is usually because your system clock is wrong or your client's root certificate list is out of date. Check the clock first, then the client version.

⚠ Do not set your client to ignore certificate warnings permanently. The protection TLS gives you comes from that verification; switching it off leaves you with encryption that anyone can stand in the middle of.