{"action":"created","issue":{"url":"https://api.github.com/repos/kvirc/KVIrc/issues/2056","repository_url":"https://api.github.com/repos/kvirc/KVIrc","labels_url":"https://api.github.com/repos/kvirc/KVIrc/issues/2056/labels{/name}","comments_url":"https://api.github.com/repos/kvirc/KVIrc/issues/2056/comments","events_url":"https://api.github.com/repos/kvirc/KVIrc/issues/2056/events","html_url":"https://github.com/kvirc/KVIrc/issues/2056","id":164660782,"number":2056,"title":"Feature request: add support for SASL ECDSA-NIST256p-CHALLENGE","user":{"login":"un1versal","id":3521959,"avatar_url":"https://avatars.githubusercontent.com/u/3521959?v=3","gravatar_id":"","url":"https://api.github.com/users/un1versal","html_url":"https://github.com/un1versal","followers_url":"https://api.github.com/users/un1versal/followers","following_url":"https://api.github.com/users/un1versal/following{/other_user}","gists_url":"https://api.github.com/users/un1versal/gists{/gist_id}","starred_url":"https://api.github.com/users/un1versal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/un1versal/subscriptions","organizations_url":"https://api.github.com/users/un1versal/orgs","repos_url":"https://api.github.com/users/un1versal/repos","events_url":"https://api.github.com/users/un1versal/events{/privacy}","received_events_url":"https://api.github.com/users/un1versal/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/kvirc/KVIrc/labels/Severity%20%E2%96%A0%20Feature%20Request","name":"Severity ■ Feature Request","color":"fbca04"},{"url":"https://api.github.com/repos/kvirc/KVIrc/labels/Severity%20%E2%96%A0%20Security","name":"Severity ■ Security","color":"A80000"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-07-09T10:14:17Z","updated_at":"2016-07-09T12:57:53Z","closed_at":null,"body":"This would probably be a good alternative to have.. other using PLAIN or PLAIN ```</sarcasm>```\r\n\r\nIrssi supports it in cap_sasl.pl script and the atheme/atheme or atheme/ecdsatool repos support it.\r\nThough you likely need  ecdsatool as well. https://wdtz.org/freenode-sasl-upgrade-irssi-howto.html\r\n\r\nI doubt theres many KVIrc scripters out there able to do that kind of thing so here goes nothing.\r\n"},"comment":{"url":"https://api.github.com/repos/kvirc/KVIrc/issues/comments/231533281","html_url":"https://github.com/kvirc/KVIrc/issues/2056#issuecomment-231533281","issue_url":"https://api.github.com/repos/kvirc/KVIrc/issues/2056","id":231533281,"user":{"login":"ctrlaltca","id":1631111,"avatar_url":"https://avatars.githubusercontent.com/u/1631111?v=3","gravatar_id":"","url":"https://api.github.com/users/ctrlaltca","html_url":"https://github.com/ctrlaltca","followers_url":"https://api.github.com/users/ctrlaltca/followers","following_url":"https://api.github.com/users/ctrlaltca/following{/other_user}","gists_url":"https://api.github.com/users/ctrlaltca/gists{/gist_id}","starred_url":"https://api.github.com/users/ctrlaltca/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ctrlaltca/subscriptions","organizations_url":"https://api.github.com/users/ctrlaltca/orgs","repos_url":"https://api.github.com/users/ctrlaltca/repos","events_url":"https://api.github.com/users/ctrlaltca/events{/privacy}","received_events_url":"https://api.github.com/users/ctrlaltca/received_events","type":"User","site_admin":false},"created_at":"2016-07-09T12:57:53Z","updated_at":"2016-07-09T12:57:53Z","body":"I encountered this issue about one year ago, when support for DH-BLOWFISH has been removed.\r\nAt that time, freenode started using an atheme version that removed support for all the existing methods except \"plain\" (for a good reason).\r\nUnfortunately, the atheme developers decided to implement only one secure method, trying to force everyone into implementing and using nenolod's own wrapper library around openssl, that had a few problems:\r\n * afaik it has never been audited by anyone\r\n * no distro was packaging it\r\n\r\nBackground links:\r\nhttp://kaniini.dereferenced.org/2014/12/26/do-not-use-DH-AES-or-DH-BLOWFISH.html\r\nhttps://nullroute.eu.org/~grawity/irc-sasl-dh.html"}}
{"actor":{"display_login":"ctrlaltca"}}