The "ircv3_sts" Module (v3)
Description
This module adds support for the IRCv3 Strict Transport Security specification.
Configuration
To load this module use the following <module>
tag:
<module name="ircv3_sts">
<connect>
This module extends the core <connect>
tags with the following fields:
Name | Type | Default Value | Description |
---|---|---|---|
usests | Boolean | Yes | New in v3.1.0! Whether users in this connect class should have a STS policy advertised to them. |
Example Usage
Disables STS policy advertisement for users in the LocalIPv4 class:
<connect name="LocalIPv4"
allow="127.0.0.0/8"
...
usests="no">
<sts>
The <sts>
tag defines settings about how the sts module should behave. This tag can only be defined once.
Name | Type | Default Value | Description |
---|---|---|---|
host | Text | None | Required! A glob pattern for the hostname a user must send to use STS. |
duration | Duration | 60d | The time period that the STS policy should last for. |
port | Number | None | Required! The port that clients should connect on securely. |
preload | Boolean | No | Whether the STS policy can be included in preload lists. |
Example Usage
<sts host="*.example.com"
duration="60d"
port="6697"
preload="yes">
Client Capabilities
Name | Description |
---|---|
sts | Defines a mechanism for clients to upgrade plaintext IRC connections to TLS (SSL). |