Attila Molnar

Send ERROR to the server being removed on SQUIT

1

Currently spanningtree only sends a `SNONOTICE` and closes the connection.

Netjoin batch desync

2

The batch documentation states that clients may delay processing batched events. This does not work well in the case of netjoins which are not atomic on servers. For example, the...

Public key pinning

7

PKP is a security mechanism that allows servers to resist impersonation by MITMs using fraudulent certs. Prior art is HTTP PKP (HPKP): - https://tools.ietf.org/html/rfc7469 - https://developer.mozilla.org/en-US/docs/Web/Security/Public_Key_Pinning - https://scotthelme.co.uk/hpkp-http-public-key-pinning/

Numeric reservation

3

A conservative amount of numerics (10?) should be reserved for each vendor upon request to avoid single numeric reservation requests

Non-normative sections in the metadata spec

1

Sections to work on: * Security considerations * Implementation considerations * Moderation considerations

A single server should be able to set the STS policy for multiple hostnames. This is useful when all servers on a network are advertising STS but the servers are...

OOB distribution of cert fingerprints

2

One idea: as a network generate a CA, include the fingerprint of it in the `irc://` link and sign the certs of all your servers certs with the CA. Clients...