GitHub/PyLink
3
0
Fork 0
mirror of https://github.com/jlu5/PyLink.git synced 2024-12-18 16:12:43 +01:00
Code Issues Projects Releases Wiki Activity

IRCNetwork: warn when using plaintext links to non-local addresses

Browse Source
This commit is contained in:
James Lu 2018-06-15 18:30:21 -07:00
parent e5f817fc95
commit 26361c4cc9
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
classes.py
View File

@ -1693,6 +1693,11 @@ class IRCNetwork(PyLinkNetworkCoreWithUtils):
self.ssl = self.serverdata.get('ssl') self.ssl = self.serverdata.get('ssl')
if self.ssl: if self.ssl:
self._setup_ssl() self._setup_ssl()
elif not ipaddress.ip_address(ip).is_loopback:
log.warning('(%s) This connection will be made via plain text, which is vulnerable '
'to man-in-the-middle (MITM) attacks and passive eavesdropping. Consider '
'enabling TLS/SSL with either certificate validation or fingerprint '
'pinning to better secure your network traffic.', self.name)
log.info("Connecting to network %r on %s:%s", self.name, ip, port) log.info("Connecting to network %r on %s:%s", self.name, ip, port)