Re: [off-topic] [tech] talkat



> Jacob Stewart <jacob.stewart@tutamail.com> writes:
> 
>>> If no client certificate is presented, the server MUST reject the connection.
>>> The server and client certificates are intended to identify the 
individual users involved.
>> What if the server operator wants to operate an anonymous chat?
> 
> Nothing prevents you from generating a one-time cert, having multiple
> pseudonymous certs corresponding to various assumed identities, etc
> etc.  With client certs we can have both authentication and
> pseudonymity.

Exactly. In the htalkat implementation, you select an identity (or create 
a new one) by using the -d option or HTALKAT_DIR environment variable.

It's also easy to run as a tor hidden service, for additional anonymity.

---

Previous in thread (2 of 3): 🗣️ Chris Brannon (chris (a) the-brannons.com)

View entire thread.