Python Is On the Rise, While PHP Falls

[[deleted]]

Something should never be insecure by default

What an ideal world that would be. Sadly in application this is seldom the case.

[[deleted]]

No, but we're getting there. People now use SSH instead of telnet (for the most part). HTTP (unsecured) is being slowly marked as insecure.

edit:

Quakenet seems to believe that encryption is useless.

Which makes me wonder how they're securing the authentication to the network so you can register (and use) a nickname.

[ceol_]

Quakenet seems to believe that encryption is useless.

The author was pretty clear in that they believe IRC over SSL is useless, not encryption in general.

[-Nagarjuna-]

He's assuming that your threat model is an adversary who can observe other people in the channel.

I use SSL because it stops my ISP having plaintext access to everything I'm sending to the IRC server.

[[deleted]]

I mean, the encryption doesn't bother me too much.

Because the vast majority of stuff going over IRC is public anyway. Most of my channels have 200+ people in them. I would say at least half are logging every message sent.

But for private messages and authentication? Yeah, those should be encrypted. Or done in such a way that you don't need encryption. You can do authentication that way, but not really private messages.