Browse Source

Note on clearnet access to irc server

Bob Mottram 8 years ago
parent
commit
a3ebf299cd
3 changed files with 194 additions and 180 deletions
  1. 8
    4
      doc/EN/usage.org
  2. BIN
      img/hexchat_setup_clearnet.jpg
  3. 186
    176
      website/EN/usage.html

+ 8
- 4
doc/EN/usage.org View File

@@ -369,19 +369,23 @@ ssh username@mydomainname -p 2222
369 369
 
370 370
 Select Administrator options, then *About this system* and make a note of the onion address for IRC. Also select the *IRC Menu* and take a note of the login password.
371 371
 
372
-[[file:images/hexchat_setup.jpg]]
373
-
374 372
 Run HexChat.
375 373
 
376 374
 Within the network list click, *Add* and enter your domain name then click *Edit*.
377 375
 
378
-Select the entry within the servers box, then enter *ircaddress.onion/6697* and press *Enter*.
376
+Select the entry within the servers box, then enter *ircaddress.onion/6697* or *mydomainname/6697* and press *Enter*.
379 377
 
380 378
 Uncheck *use global user information*.
381 379
 
382 380
 Enter first and second nicknames and check *connect to this network on startup*.
383 381
 
384
-Make sure that *use SSL* is unchecked. Encryption will be handled via the onion address itself.
382
+If you are using the ordinary domain name (clearnet/ICANN) then make sure that *Use SSL* is checked.
383
+
384
+[[file:images/hexchat_setup_clearnet.jpg]]
385
+
386
+If you are using the onion address then *use SSL* should be unchecked and the transport encryption will be handled via the onion address itself.
387
+
388
+[[file:images/hexchat_setup.jpg]]
385 389
 
386 390
 Within the *Password* field enter the password which can be found from the IRC menu of the *control panel*.
387 391
 

BIN
img/hexchat_setup_clearnet.jpg View File


+ 186
- 176
website/EN/usage.html View File

@@ -3,11 +3,11 @@
3 3
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
4 4
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
5 5
 <head>
6
-<!-- 2016-10-19 Wed 15:26 -->
6
+<!-- 2016-10-29 Sat 12:22 -->
7 7
 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
8 8
 <meta name="viewport" content="width=device-width, initial-scale=1" />
9 9
 <title></title>
10
-<meta name="generator" content="Org-mode" />
10
+<meta name="generator" content="Org mode" />
11 11
 <meta name="author" content="Bob Mottram" />
12 12
 <meta name="description" content="Turn the Beaglebone Black into a personal communications server"
13 13
  />
@@ -255,15 +255,15 @@ for the JavaScript code in this tag.
255 255
 </colgroup>
256 256
 <tbody>
257 257
 <tr>
258
-<td class="org-left"><a href="#orgceda752">Readme</a></td>
258
+<td class="org-left"><a href="#orgfe1010c">Readme</a></td>
259 259
 </tr>
260 260
 
261 261
 <tr>
262
-<td class="org-left"><a href="#org25d4e88">Improving ssh security</a></td>
262
+<td class="org-left"><a href="#org5ba5ea0">Improving ssh security</a></td>
263 263
 </tr>
264 264
 
265 265
 <tr>
266
-<td class="org-left"><a href="#org4c1346e">Administrating the system via an onion address (Tor)</a></td>
266
+<td class="org-left"><a href="#orgc42a31e">Administrating the system via an onion address (Tor)</a></td>
267 267
 </tr>
268 268
 
269 269
 <tr>
@@ -275,50 +275,50 @@ for the JavaScript code in this tag.
275 275
 </tr>
276 276
 
277 277
 <tr>
278
-<td class="org-left"><a href="#orgc7bfc05">Syncing to the Cloud</a></td>
278
+<td class="org-left"><a href="#org3c1ea7b">Syncing to the Cloud</a></td>
279 279
 </tr>
280 280
 
281 281
 <tr>
282
-<td class="org-left"><a href="#org82415cd">Play Music</a></td>
282
+<td class="org-left"><a href="#org8b9ea30">Play Music</a></td>
283 283
 </tr>
284 284
 
285 285
 <tr>
286
-<td class="org-left"><a href="#orgca9e586">Microblogging (GNU Social)</a></td>
286
+<td class="org-left"><a href="#orge237203">Microblogging (GNU Social)</a></td>
287 287
 </tr>
288 288
 
289 289
 <tr>
290
-<td class="org-left"><a href="#org9671850">Sharing things</a></td>
290
+<td class="org-left"><a href="#org633f62c">Sharing things</a></td>
291 291
 </tr>
292 292
 
293 293
 <tr>
294
-<td class="org-left"><a href="#org88f8256">Social Network</a></td>
294
+<td class="org-left"><a href="#org5154bba">Social Network</a></td>
295 295
 </tr>
296 296
 
297 297
 <tr>
298
-<td class="org-left"><a href="#org7c4659b">Chat Services</a></td>
298
+<td class="org-left"><a href="#org2c4656e">Chat Services</a></td>
299 299
 </tr>
300 300
 
301 301
 <tr>
302
-<td class="org-left"><a href="#org80b3e80">RSS Reader</a></td>
302
+<td class="org-left"><a href="#org0ca1e0e">RSS Reader</a></td>
303 303
 </tr>
304 304
 
305 305
 <tr>
306
-<td class="org-left"><a href="#orgedc0a36">Git Projects</a></td>
306
+<td class="org-left"><a href="#org988b59e">Git Projects</a></td>
307 307
 </tr>
308 308
 
309 309
 <tr>
310
-<td class="org-left"><a href="#orgb4cd0c8">Adding or removing users</a></td>
310
+<td class="org-left"><a href="#org7532960">Adding or removing users</a></td>
311 311
 </tr>
312 312
 
313 313
 <tr>
314
-<td class="org-left"><a href="#org8a02c37">Blocking Ads</a></td>
314
+<td class="org-left"><a href="#orge4624b4">Blocking Ads</a></td>
315 315
 </tr>
316 316
 </tbody>
317 317
 </table>
318 318
 
319
-<div id="outline-container-orgceda752" class="outline-2">
320
-<h2 id="orgceda752">Readme</h2>
321
-<div class="outline-text-2" id="text-orgceda752">
319
+<div id="outline-container-orgfe1010c" class="outline-2">
320
+<h2 id="orgfe1010c">Readme</h2>
321
+<div class="outline-text-2" id="text-orgfe1010c">
322 322
 <p>
323 323
 After the system has installed a README file will be generated which contains passwords and some brief advice on using the installed systems. You can read this with the following commands:
324 324
 </p>
@@ -338,9 +338,9 @@ To exit you can either just close the terminal or use <b>CTRL-x CTRL-c</b> follo
338 338
 </p>
339 339
 </div>
340 340
 </div>
341
-<div id="outline-container-org25d4e88" class="outline-2">
342
-<h2 id="org25d4e88">Improving ssh security</h2>
343
-<div class="outline-text-2" id="text-org25d4e88">
341
+<div id="outline-container-org5ba5ea0" class="outline-2">
342
+<h2 id="org5ba5ea0">Improving ssh security</h2>
343
+<div class="outline-text-2" id="text-org5ba5ea0">
344 344
 <p>
345 345
 To improve ssh security you can generate an ssh key pair on your system and then upload the public key to the Freedombone.
346 346
 </p>
@@ -390,9 +390,9 @@ If you wish to only use ssh keys then log in to the Freedombone, become the root
390 390
 </div>
391 391
 </div>
392 392
 
393
-<div id="outline-container-org4c1346e" class="outline-2">
394
-<h2 id="org4c1346e">Administrating the system via an onion address (Tor)</h2>
395
-<div class="outline-text-2" id="text-org4c1346e">
393
+<div id="outline-container-orgc42a31e" class="outline-2">
394
+<h2 id="orgc42a31e">Administrating the system via an onion address (Tor)</h2>
395
+<div class="outline-text-2" id="text-orgc42a31e">
396 396
 <p>
397 397
 You can also access your system via the Tor system using an onion address. To find out what the onion address for ssh access is you can do the following:
398 398
 </p>
@@ -434,9 +434,9 @@ Subsequently even if dynamic DNS isn't working you may still be able to administ
434 434
 </p>
435 435
 </div>
436 436
 </div>
437
-<div id="outline-container-orgc7bfc05" class="outline-2">
438
-<h2 id="orgc7bfc05">Syncing to the Cloud</h2>
439
-<div class="outline-text-2" id="text-orgc7bfc05">
437
+<div id="outline-container-org3c1ea7b" class="outline-2">
438
+<h2 id="org3c1ea7b">Syncing to the Cloud</h2>
439
+<div class="outline-text-2" id="text-org3c1ea7b">
440 440
 <p>
441 441
 <a href="https://syncthing.net">Syncthing</a> provides a similar capability to proprietary systems such as Dropbox, and also is well suited for use with low power single board computers. You can have one or more directories which are synchronized across your various laptops/desktops/devices, and this makes it hard for you to ever lose important files. The manner in which the synchronization is done is pretty secure, such that it would be difficult for passive adversaries (mass surveillance, "<i>men in the middle</i>", etc) to know what files you're sharing. Of course, you don't necessarily need to be running a server in order to use Syncthing, but if you do have a server which is always running then there's always at least one place to synchronize your files to or from.
442 442
 </p>
@@ -446,9 +446,9 @@ Freedombone provides Syncthing shared directories for each user on the system, p
446 446
 </p>
447 447
 </div>
448 448
 
449
-<div id="outline-container-orge94c235" class="outline-3">
450
-<h3 id="orge94c235">On a laptop</h3>
451
-<div class="outline-text-3" id="text-orge94c235">
449
+<div id="outline-container-orgfd85c63" class="outline-3">
450
+<h3 id="orgfd85c63">On a laptop</h3>
451
+<div class="outline-text-3" id="text-orgfd85c63">
452 452
 <p>
453 453
 Install syncthing:
454 454
 </p>
@@ -501,9 +501,9 @@ Now wait for a few minutes. Eventually you will see two messages appear within t
501 501
 </p>
502 502
 </div>
503 503
 </div>
504
-<div id="outline-container-org16d1d23" class="outline-3">
505
-<h3 id="org16d1d23">On Android</h3>
506
-<div class="outline-text-3" id="text-org16d1d23">
504
+<div id="outline-container-org7ca375d" class="outline-3">
505
+<h3 id="org7ca375d">On Android</h3>
506
+<div class="outline-text-3" id="text-org7ca375d">
507 507
 <p>
508 508
 Install Syncthing and Connectbot from F-droid.
509 509
 </p>
@@ -534,12 +534,12 @@ Now wait for a few minutes or more. Eventually you should receive two notificati
534 534
 </div>
535 535
 </div>
536 536
 </div>
537
-<div id="outline-container-org82415cd" class="outline-2">
538
-<h2 id="org82415cd">Play Music</h2>
539
-<div class="outline-text-2" id="text-org82415cd">
540
-</div><div id="outline-container-orgf2b907b" class="outline-3">
541
-<h3 id="orgf2b907b">With the DLNA service</h3>
542
-<div class="outline-text-3" id="text-orgf2b907b">
537
+<div id="outline-container-org8b9ea30" class="outline-2">
538
+<h2 id="org8b9ea30">Play Music</h2>
539
+<div class="outline-text-2" id="text-org8b9ea30">
540
+</div><div id="outline-container-org72875ff" class="outline-3">
541
+<h3 id="org72875ff">With the DLNA service</h3>
542
+<div class="outline-text-3" id="text-org72875ff">
543 543
 <p>
544 544
 An easy way to play music on any mobile device in your home is to use the DLNA service. Copy your music into a directory called "<i>Music</i>" on a USB thumb drive and then insert it into from socket on the Beaglebone.
545 545
 </p>
@@ -578,12 +578,12 @@ The DLNA service will only work within your local home network, and isn't remote
578 578
 </div>
579 579
 </div>
580 580
 
581
-<div id="outline-container-orgca9e586" class="outline-2">
582
-<h2 id="orgca9e586">Microblogging (GNU Social)</h2>
583
-<div class="outline-text-2" id="text-orgca9e586">
584
-</div><div id="outline-container-org82aa92f" class="outline-3">
585
-<h3 id="org82aa92f">Initial setup</h3>
586
-<div class="outline-text-3" id="text-org82aa92f">
581
+<div id="outline-container-orge237203" class="outline-2">
582
+<h2 id="orge237203">Microblogging (GNU Social)</h2>
583
+<div class="outline-text-2" id="text-orge237203">
584
+</div><div id="outline-container-org654d2e8" class="outline-3">
585
+<h3 id="org654d2e8">Initial setup</h3>
586
+<div class="outline-text-3" id="text-org654d2e8">
587 587
 <p>
588 588
 To log into your GNU Social site first obtain your username and password from the "microblogging" section of the readme file.
589 589
 </p>
@@ -611,17 +611,17 @@ GNU Social has a clutter-free mobile user interface which can be accessed via a
611 611
 </div>
612 612
 </div>
613 613
 
614
-<div id="outline-container-orgb789dc6" class="outline-3">
615
-<h3 id="orgb789dc6">Direct Messages (DMs) and privacy</h3>
616
-<div class="outline-text-3" id="text-orgb789dc6">
614
+<div id="outline-container-org9394f3b" class="outline-3">
615
+<h3 id="org9394f3b">Direct Messages (DMs) and privacy</h3>
616
+<div class="outline-text-3" id="text-org9394f3b">
617 617
 <p>
618 618
 One important point about GNU Social is that although direct messages (DMs) are treated as being private their security is quite poor. If you want real communications privacy then use other systems such as XMPP+OMEMO/OTR, Tox or email with GPG. GNU Social is primarily about <i>fully public communications</i>.
619 619
 </p>
620 620
 </div>
621 621
 </div>
622
-<div id="outline-container-orga1999d1" class="outline-3">
623
-<h3 id="orga1999d1">Using with Emacs</h3>
624
-<div class="outline-text-3" id="text-orga1999d1">
622
+<div id="outline-container-orgaf70bc2" class="outline-3">
623
+<h3 id="orgaf70bc2">Using with Emacs</h3>
624
+<div class="outline-text-3" id="text-orgaf70bc2">
625 625
 <p>
626 626
 If you are an Emacs user it's also possible to set up GNU Social mode as follows:
627 627
 </p>
@@ -705,9 +705,9 @@ And as a quick reference the main keys are:
705 705
 </div>
706 706
 </div>
707 707
 
708
-<div id="outline-container-org9671850" class="outline-2">
709
-<h2 id="org9671850">Sharing things</h2>
710
-<div class="outline-text-2" id="text-org9671850">
708
+<div id="outline-container-org633f62c" class="outline-2">
709
+<h2 id="org633f62c">Sharing things</h2>
710
+<div class="outline-text-2" id="text-org633f62c">
711 711
 <p>
712 712
 If you have the GNU Social microblogging system installed then it's also possible to share things or services between groups or with particular users. This can be useful for sharing items within a family, club or in a local sharing economy. Sharing things freely, without money, reveals the social basis at the root of all economics which money normally conceals or obscures.
713 713
 </p>
@@ -734,20 +734,20 @@ The "<i>catalog</i>" button then allows you to search for shared things within t
734 734
 </div>
735 735
 </div>
736 736
 
737
-<div id="outline-container-org88f8256" class="outline-2">
738
-<h2 id="org88f8256">Social Network</h2>
739
-<div class="outline-text-2" id="text-org88f8256">
740
-</div><div id="outline-container-org0167fa8" class="outline-3">
741
-<h3 id="org0167fa8">Domains</h3>
742
-<div class="outline-text-3" id="text-org0167fa8">
737
+<div id="outline-container-org5154bba" class="outline-2">
738
+<h2 id="org5154bba">Social Network</h2>
739
+<div class="outline-text-2" id="text-org5154bba">
740
+</div><div id="outline-container-orgd22bc6d" class="outline-3">
741
+<h3 id="orgd22bc6d">Domains</h3>
742
+<div class="outline-text-3" id="text-orgd22bc6d">
743 743
 <p>
744 744
 Both Hubzilla and GNU Social try to obtain certificates automatically at the time of installation via Let's Encrypt. This will likely mean that in order for this to work you'll need to have obtained at least one "official" domain via a domain selling service, since Let's Encrypt mostly doesn't seem to work with free subdomains from sites such as freeDNS.
745 745
 </p>
746 746
 </div>
747 747
 </div>
748
-<div id="outline-container-org91f05ec" class="outline-3">
749
-<h3 id="org91f05ec">Initial install</h3>
750
-<div class="outline-text-3" id="text-org91f05ec">
748
+<div id="outline-container-org3b77dd2" class="outline-3">
749
+<h3 id="org3b77dd2">Initial install</h3>
750
+<div class="outline-text-3" id="text-org3b77dd2">
751 751
 <p>
752 752
 On first visiting your Hubzilla site you'll see the login screen. The first thing you need to do is <b>register</b> a new user. The first user on the system then becomes its administrator.
753 753
 </p>
@@ -761,19 +761,19 @@ On first visiting your Hubzilla site you'll see the login screen. The first thin
761 761
 </div>
762 762
 </div>
763 763
 
764
-<div id="outline-container-org7c4659b" class="outline-2">
765
-<h2 id="org7c4659b">Chat Services</h2>
766
-<div class="outline-text-2" id="text-org7c4659b">
767
-</div><div id="outline-container-org171782e" class="outline-3">
768
-<h3 id="org171782e">IRC</h3>
769
-<div class="outline-text-3" id="text-org171782e">
764
+<div id="outline-container-org2c4656e" class="outline-2">
765
+<h2 id="org2c4656e">Chat Services</h2>
766
+<div class="outline-text-2" id="text-org2c4656e">
767
+</div><div id="outline-container-org1379527" class="outline-3">
768
+<h3 id="org1379527">IRC</h3>
769
+<div class="outline-text-3" id="text-org1379527">
770 770
 <p>
771 771
 IRC is useful for multi-user chat. The classic use case is for software development where many engineers might need to coordinate their activities, but it's also useful for meetings, parties and general socialising.
772 772
 </p>
773 773
 </div>
774
-<div id="outline-container-org9e5f7c1" class="outline-4">
775
-<h4 id="org9e5f7c1">Irssi</h4>
776
-<div class="outline-text-4" id="text-org9e5f7c1">
774
+<div id="outline-container-orgd6eb3c4" class="outline-4">
775
+<h4 id="orgd6eb3c4">Irssi</h4>
776
+<div class="outline-text-4" id="text-orgd6eb3c4">
777 777
 <p>
778 778
 The easiest way to use irssi is to connect to your system, like this:
779 779
 </p>
@@ -788,9 +788,9 @@ Then select <b>IRC</b> from the menu. However, other than via this method using
788 788
 </p>
789 789
 </div>
790 790
 </div>
791
-<div id="outline-container-org7dc43a9" class="outline-4">
792
-<h4 id="org7dc43a9">HexChat</h4>
793
-<div class="outline-text-4" id="text-org7dc43a9">
791
+<div id="outline-container-org2b4230d" class="outline-4">
792
+<h4 id="org2b4230d">HexChat</h4>
793
+<div class="outline-text-4" id="text-org2b4230d">
794 794
 <p>
795 795
 HexChat (formerly XChat) is compatible with proxying via Tor and so provides the best security when connecting to your IRC server. It will allow you to connect to your IRC server's onion address.
796 796
 </p>
@@ -922,12 +922,6 @@ Now look up the onion address for your IRC server
922 922
 Select Administrator options, then <b>About this system</b> and make a note of the onion address for IRC. Also select the <b>IRC Menu</b> and take a note of the login password.
923 923
 </p>
924 924
 
925
-
926
-<div class="figure">
927
-<p><img src="images/hexchat_setup.jpg" alt="hexchat_setup.jpg" />
928
-</p>
929
-</div>
930
-
931 925
 <p>
932 926
 Run HexChat.
933 927
 </p>
@@ -937,7 +931,7 @@ Within the network list click, <b>Add</b> and enter your domain name then click
937 931
 </p>
938 932
 
939 933
 <p>
940
-Select the entry within the servers box, then enter <b>ircaddress.onion/6697</b> and press <b>Enter</b>.
934
+Select the entry within the servers box, then enter <b>ircaddress.onion/6697</b> or <b>mydomainname/6697</b> and press <b>Enter</b>.
941 935
 </p>
942 936
 
943 937
 <p>
@@ -949,8 +943,24 @@ Enter first and second nicknames and check <b>connect to this network on startup
949 943
 </p>
950 944
 
951 945
 <p>
952
-Make sure that <b>use SSL</b> is unchecked. Encryption will be handled via the onion address itself.
946
+If you are using the ordinary domain name (clearnet/ICANN) then make sure that <b>Use SSL</b> is checked.
947
+</p>
948
+
949
+
950
+<div class="figure">
951
+<p><img src="images/hexchat_setup_clearnet.jpg" alt="hexchat_setup_clearnet.jpg" />
952
+</p>
953
+</div>
954
+
955
+<p>
956
+If you are using the onion address then <b>use SSL</b> should be unchecked and the transport encryption will be handled via the onion address itself.
957
+</p>
958
+
959
+
960
+<div class="figure">
961
+<p><img src="images/hexchat_setup.jpg" alt="hexchat_setup.jpg" />
953 962
 </p>
963
+</div>
954 964
 
955 965
 <p>
956 966
 Within the <b>Password</b> field enter the password which can be found from the IRC menu of the <b>control panel</b>.
@@ -966,9 +976,9 @@ Click <b>close</b> and then <b>connect</b>.
966 976
 </div>
967 977
 </div>
968 978
 
969
-<div id="outline-container-org8c84cd7" class="outline-4">
970
-<h4 id="org8c84cd7">Emacs</h4>
971
-<div class="outline-text-4" id="text-org8c84cd7">
979
+<div id="outline-container-org7ad5796" class="outline-4">
980
+<h4 id="org7ad5796">Emacs</h4>
981
+<div class="outline-text-4" id="text-org7ad5796">
972 982
 <p>
973 983
 If you are an Emacs user then you can also connect to your IRC server via Emacs.
974 984
 </p>
@@ -999,9 +1009,9 @@ Add the following to your Emacs configuration file:
999 1009
 </div>
1000 1010
 </div>
1001 1011
 </div>
1002
-<div id="outline-container-org1d2bded" class="outline-4">
1003
-<h4 id="org1d2bded">Changing or removing the IRC password</h4>
1004
-<div class="outline-text-4" id="text-org1d2bded">
1012
+<div id="outline-container-org34317b0" class="outline-4">
1013
+<h4 id="org34317b0">Changing or removing the IRC password</h4>
1014
+<div class="outline-text-4" id="text-org34317b0">
1005 1015
 <p>
1006 1016
 By default the IRC server is set up to require a password for users to log in. The password is the same for all users. If you want to change or remove the password:
1007 1017
 </p>
@@ -1018,20 +1028,20 @@ Select <i>Administrator controls</i> then <b>IRC Menu</b> and then change the pa
1018 1028
 </div>
1019 1029
 </div>
1020 1030
 
1021
-<div id="outline-container-org51f0c3f" class="outline-3">
1022
-<h3 id="org51f0c3f">XMPP/Jabber</h3>
1023
-<div class="outline-text-3" id="text-org51f0c3f">
1024
-</div><div id="outline-container-org981f61d" class="outline-4">
1025
-<h4 id="org981f61d">About XMPP</h4>
1026
-<div class="outline-text-4" id="text-org981f61d">
1031
+<div id="outline-container-org24acf45" class="outline-3">
1032
+<h3 id="org24acf45">XMPP/Jabber</h3>
1033
+<div class="outline-text-3" id="text-org24acf45">
1034
+</div><div id="outline-container-orgeca451e" class="outline-4">
1035
+<h4 id="orgeca451e">About XMPP</h4>
1036
+<div class="outline-text-4" id="text-orgeca451e">
1027 1037
 <p>
1028 1038
 A well written article on the state of XMPP and how it compares to other chat protocols <a href="https://gultsch.de/xmpp_2016.html">can be found here</a>.
1029 1039
 </p>
1030 1040
 </div>
1031 1041
 </div>
1032
-<div id="outline-container-orgf4426e7" class="outline-4">
1033
-<h4 id="orgf4426e7">Using with Gajim</h4>
1034
-<div class="outline-text-4" id="text-orgf4426e7">
1042
+<div id="outline-container-orga3ac2fa" class="outline-4">
1043
+<h4 id="orga3ac2fa">Using with Gajim</h4>
1044
+<div class="outline-text-4" id="text-orga3ac2fa">
1035 1045
 <p>
1036 1046
 In mid 2016 <a href="https://gajim.org/">Gajim</a> became the first desktop XMPP client to support the <a href="https://en.wikipedia.org/wiki/OMEMO">OMEMO end-to-end security standard</a>, which is superior to the more traditional <a href="https://en.wikipedia.org/wiki/Off-the-Record_Messaging">OTR</a> since it also includes multi-user chat and the ratcheting mechanism pioneered by Open Whisper Systems. To install it:
1037 1047
 </p>
@@ -1075,9 +1085,9 @@ If you wish to use OpenPGP to encrypt your messages then go to <b>Edit/Accounts<
1075 1085
 </div>
1076 1086
 </div>
1077 1087
 
1078
-<div id="outline-container-org5652887" class="outline-4">
1079
-<h4 id="org5652887">Using with Profanity</h4>
1080
-<div class="outline-text-4" id="text-org5652887">
1088
+<div id="outline-container-orgdbc97e4" class="outline-4">
1089
+<h4 id="orgdbc97e4">Using with Profanity</h4>
1090
+<div class="outline-text-4" id="text-orgdbc97e4">
1081 1091
 <p>
1082 1092
 The <a href="https://profanity.im">Profanity</a> shell based user interface and is perhaps the simplest way to use XMPP from a laptop. It's also a good way to ensure that your OTR keys are the same even when logging in from different laptops or devices, and it also means that if those devices later become compomised then there are no locally stored OTR keys to be found.
1083 1093
 </p>
@@ -1159,9 +1169,9 @@ When accessed via the user control panel the client is automatically routed thro
1159 1169
 </p>
1160 1170
 </div>
1161 1171
 </div>
1162
-<div id="outline-container-orgcba6809" class="outline-4">
1163
-<h4 id="orgcba6809">Using with Jitsi</h4>
1164
-<div class="outline-text-4" id="text-orgcba6809">
1172
+<div id="outline-container-org9faa02f" class="outline-4">
1173
+<h4 id="org9faa02f">Using with Jitsi</h4>
1174
+<div class="outline-text-4" id="text-org9faa02f">
1165 1175
 <p>
1166 1176
 Jitsi is the recommended communications client for desktop or laptop systems, since it includes the <i>off the record</i> (OTR) feature which provides some additional security beyond the usual SSL certificates.
1167 1177
 </p>
@@ -1191,9 +1201,9 @@ You can also <a href="https://www.youtube.com/watch?v=vgx7VSrDGjk">see this vide
1191 1201
 </p>
1192 1202
 </div>
1193 1203
 </div>
1194
-<div id="outline-container-org858031e" class="outline-4">
1195
-<h4 id="org858031e">Using with Ubuntu</h4>
1196
-<div class="outline-text-4" id="text-org858031e">
1204
+<div id="outline-container-org057fbea" class="outline-4">
1205
+<h4 id="org057fbea">Using with Ubuntu</h4>
1206
+<div class="outline-text-4" id="text-org057fbea">
1197 1207
 <p>
1198 1208
 The default XMPP client in Ubuntu is Empathy.  Using Empathy isn't as secure as using Jitsi, since it doesn't include the <i>off the record</i> feature, but since it's the default it's what many users will have easy access to.
1199 1209
 </p>
@@ -1211,17 +1221,17 @@ Click on <b>Advanced</b> and make sure that <b>Encryption required</b> and <b>Ig
1211 1221
 </p>
1212 1222
 </div>
1213 1223
 </div>
1214
-<div id="outline-container-orgaf05b14" class="outline-4">
1215
-<h4 id="orgaf05b14">Using Tor Messenger</h4>
1216
-<div class="outline-text-4" id="text-orgaf05b14">
1224
+<div id="outline-container-orgef0e33c" class="outline-4">
1225
+<h4 id="orgef0e33c">Using Tor Messenger</h4>
1226
+<div class="outline-text-4" id="text-orgef0e33c">
1217 1227
 <p>
1218 1228
 Tor Messenger is a messaging client which supports XMPP, and its onion routing enables you to protect the metadata of chat interactions to some extent by making it difficult for an adversary to know which server is talking to which. You can download Tor Messenger from <a href="https://torproject.org">torproject.org</a> and the setup is pretty simple.
1219 1229
 </p>
1220 1230
 </div>
1221 1231
 </div>
1222
-<div id="outline-container-org0d6c283" class="outline-4">
1223
-<h4 id="org0d6c283">Using with Android/Conversations</h4>
1224
-<div class="outline-text-4" id="text-org0d6c283">
1232
+<div id="outline-container-org3353ae7" class="outline-4">
1233
+<h4 id="org3353ae7">Using with Android/Conversations</h4>
1234
+<div class="outline-text-4" id="text-org3353ae7">
1225 1235
 <p>
1226 1236
 Install <a href="https://f-droid.org/">F-Droid</a>
1227 1237
 </p>
@@ -1256,16 +1266,16 @@ Then select <b>Next</b>. When chatting you can use the lock icon to encrypt your
1256 1266
 </div>
1257 1267
 </div>
1258 1268
 </div>
1259
-<div id="outline-container-org0901b2a" class="outline-3">
1260
-<h3 id="org0901b2a">Tox</h3>
1261
-<div class="outline-text-3" id="text-org0901b2a">
1269
+<div id="outline-container-org889cd39" class="outline-3">
1270
+<h3 id="org889cd39">Tox</h3>
1271
+<div class="outline-text-3" id="text-org889cd39">
1262 1272
 <p>
1263 1273
 Tox is an encrypted peer-to-peer messaging system and so should work without Freedombone. It uses a system of nodes which act as a sort of directory service allowing users to find and connect to each other. The Tox node ID on the Freedombone can be found within the README within your home directory. If you have other users connect to your node then you will be able to continue chatting even when no other nodes are available.
1264 1274
 </p>
1265 1275
 </div>
1266
-<div id="outline-container-org8e86e2d" class="outline-4">
1267
-<h4 id="org8e86e2d">Using the Toxic client</h4>
1268
-<div class="outline-text-4" id="text-org8e86e2d">
1276
+<div id="outline-container-org411a34b" class="outline-4">
1277
+<h4 id="org411a34b">Using the Toxic client</h4>
1278
+<div class="outline-text-4" id="text-org411a34b">
1269 1279
 <p>
1270 1280
 Log into your system with:
1271 1281
 </p>
@@ -1288,20 +1298,20 @@ Then from the menu select <b>Tox Chat</b>. Tox is encrypted by default and also
1288 1298
 </div>
1289 1299
 </div>
1290 1300
 
1291
-<div id="outline-container-orgd0eca9c" class="outline-3">
1292
-<h3 id="orgd0eca9c">VoIP (Voice and text chat)</h3>
1293
-<div class="outline-text-3" id="text-orgd0eca9c">
1294
-</div><div id="outline-container-orgd11f828" class="outline-4">
1295
-<h4 id="orgd11f828">Text chat</h4>
1296
-<div class="outline-text-4" id="text-orgd11f828">
1301
+<div id="outline-container-org6607dd6" class="outline-3">
1302
+<h3 id="org6607dd6">VoIP (Voice and text chat)</h3>
1303
+<div class="outline-text-3" id="text-org6607dd6">
1304
+</div><div id="outline-container-org75f51a1" class="outline-4">
1305
+<h4 id="org75f51a1">Text chat</h4>
1306
+<div class="outline-text-4" id="text-org75f51a1">
1297 1307
 <p>
1298 1308
 In addition to voice it is also possible to do text chat via mumble. The security of this is pretty good provided that you do it via Plumble and Orbot on mobile, but compared to other options such as XMPP/Conversations or Tox the security is not as good, since the mumble server currently doesn't support forward secrecy.
1299 1309
 </p>
1300 1310
 </div>
1301 1311
 </div>
1302
-<div id="outline-container-orgbf8432e" class="outline-4">
1303
-<h4 id="orgbf8432e">Using with Ubuntu</h4>
1304
-<div class="outline-text-4" id="text-orgbf8432e">
1312
+<div id="outline-container-orge6d0e02" class="outline-4">
1313
+<h4 id="orge6d0e02">Using with Ubuntu</h4>
1314
+<div class="outline-text-4" id="text-orge6d0e02">
1305 1315
 <p>
1306 1316
 Within the software center search for "mumble" and install the client then run it. Skip through the audio setup wizard.
1307 1317
 </p>
@@ -1311,9 +1321,9 @@ Click on "add new" to add a new server and enter the default domain name for the
1311 1321
 </p>
1312 1322
 </div>
1313 1323
 </div>
1314
-<div id="outline-container-org049423c" class="outline-4">
1315
-<h4 id="org049423c">Using with Android</h4>
1316
-<div class="outline-text-4" id="text-org049423c">
1324
+<div id="outline-container-org6f3fe93" class="outline-4">
1325
+<h4 id="org6f3fe93">Using with Android</h4>
1326
+<div class="outline-text-4" id="text-org6f3fe93">
1317 1327
 <p>
1318 1328
 Install <a href="https://f-droid.org/">F-Droid</a>
1319 1329
 </p>
@@ -1348,24 +1358,24 @@ Selecting the server by pressing on it then connects you to the server so that y
1348 1358
 </div>
1349 1359
 </div>
1350 1360
 </div>
1351
-<div id="outline-container-org6b270aa" class="outline-3">
1352
-<h3 id="org6b270aa">SIP phones</h3>
1353
-<div class="outline-text-3" id="text-org6b270aa">
1361
+<div id="outline-container-org94a179b" class="outline-3">
1362
+<h3 id="org94a179b">SIP phones</h3>
1363
+<div class="outline-text-3" id="text-org94a179b">
1354 1364
 <p>
1355 1365
 Freedombone also supports SIP phones The username and domain is the same as for your email address, and the SIP password and extension number will appear within the README file in your home directory. Various SIP client options are available, such as CSipSimple on Android and Jitsi on desktop or laptop machines. Ideally use clients which support ZRTP, which will provide the best level of security.
1356 1366
 </p>
1357 1367
 </div>
1358
-<div id="outline-container-orgf5a05aa" class="outline-4">
1359
-<h4 id="orgf5a05aa">About ZRTP</h4>
1360
-<div class="outline-text-4" id="text-orgf5a05aa">
1368
+<div id="outline-container-orgd876760" class="outline-4">
1369
+<h4 id="orgd876760">About ZRTP</h4>
1370
+<div class="outline-text-4" id="text-orgd876760">
1361 1371
 <p>
1362 1372
 <a href="https://jitsi.org/Documentation/ZrtpFAQ">ZRTP</a> appears to be the current best standard to end-to-end encrypted voice calls, combining good security with simplicity of use. When the initial cryptographic negotiation between phones is done at the start of a call a short authentication string (SAS) is calculated and displayed at both ends. To check that there isn't anyone intercepting the call and acting as a <i>man in the middle</i> - as <a href="https://en.wikipedia.org/wiki/Stingray_phone_tracker">stingray type devices</a> try to do - the short authentication string can be read out and verbally confirmed between the callers. If it's the same then you can be pretty confident that the call is secure.
1363 1373
 </p>
1364 1374
 </div>
1365 1375
 </div>
1366
-<div id="outline-container-org592cbf5" class="outline-4">
1367
-<h4 id="org592cbf5">Using with CSIPSimple</h4>
1368
-<div class="outline-text-4" id="text-org592cbf5">
1376
+<div id="outline-container-org9b8d8e3" class="outline-4">
1377
+<h4 id="org9b8d8e3">Using with CSIPSimple</h4>
1378
+<div class="outline-text-4" id="text-org9b8d8e3">
1369 1379
 <p>
1370 1380
 Add an account. Under <b>General Wizards</b> choose <b>Expert</b> and enter the following details:
1371 1381
 </p>
@@ -1421,9 +1431,9 @@ If everything is working the account should appear in green with a status of <b>
1421 1431
 </p>
1422 1432
 </div>
1423 1433
 </div>
1424
-<div id="outline-container-org53f86de" class="outline-4">
1425
-<h4 id="org53f86de">Using with Ring</h4>
1426
-<div class="outline-text-4" id="text-org53f86de">
1434
+<div id="outline-container-org5b83417" class="outline-4">
1435
+<h4 id="org5b83417">Using with Ring</h4>
1436
+<div class="outline-text-4" id="text-org5b83417">
1427 1437
 <p>
1428 1438
 From the menu select <b>Manage accounts</b>.
1429 1439
 </p>
@@ -1476,9 +1486,9 @@ Select the <b>Security</b> tab. Under <b>SRTP Key Exchange</b> select <b>ZRTP</b
1476 1486
 </div>
1477 1487
 </div>
1478 1488
 
1479
-<div id="outline-container-org80b3e80" class="outline-2">
1480
-<h2 id="org80b3e80">RSS Reader</h2>
1481
-<div class="outline-text-2" id="text-org80b3e80">
1489
+<div id="outline-container-org0ca1e0e" class="outline-2">
1490
+<h2 id="org0ca1e0e">RSS Reader</h2>
1491
+<div class="outline-text-2" id="text-org0ca1e0e">
1482 1492
 <p>
1483 1493
 The way that RSS reading is set up on Freedombone gives you strong reading privacy. Not only is there onion routing between you and the server but also between the server and the source of the RSS feed. The only down side is that many RSS feeds are still http only, and so could be vulnerable to injection attacks, but it's expected that more of this will go to https in the foreseeable future due to a combination of growing recognition of security issues and systems like Let's Encrypt which make obtaining certificates much easier.
1484 1494
 </p>
@@ -1490,9 +1500,9 @@ The way that RSS reading is set up on Freedombone gives you strong reading priva
1490 1500
 </div>
1491 1501
 </div>
1492 1502
 
1493
-<div id="outline-container-org4816d0c" class="outline-3">
1494
-<h3 id="org4816d0c">Finding the onion address</h3>
1495
-<div class="outline-text-3" id="text-org4816d0c">
1503
+<div id="outline-container-orga52747f" class="outline-3">
1504
+<h3 id="orga52747f">Finding the onion address</h3>
1505
+<div class="outline-text-3" id="text-orga52747f">
1496 1506
 <p>
1497 1507
 See the control panel for the RSS reader onion address.
1498 1508
 </p>
@@ -1516,9 +1526,9 @@ To set up the system open <a href="http://rss_reader_onion_address">http://rss_r
1516 1526
 </div>
1517 1527
 </div>
1518 1528
 
1519
-<div id="outline-container-org0a09be0" class="outline-3">
1520
-<h3 id="org0a09be0">On mobile</h3>
1521
-<div class="outline-text-3" id="text-org0a09be0">
1529
+<div id="outline-container-orge13d095" class="outline-3">
1530
+<h3 id="orge13d095">On mobile</h3>
1531
+<div class="outline-text-3" id="text-orge13d095">
1522 1532
 <p>
1523 1533
 To access the RSS reader from a mobile device you can install a Tor compatible browser such as OrFox. It will try to automatically change to the mobile version of the user interface. Remember to add the site to the NoScript whitelist, and you may also need to turn HTTPS Everywhere off.
1524 1534
 </p>
@@ -1530,9 +1540,9 @@ A note for the paranoid is that on mobile devices you get redirected to a differ
1530 1540
 </blockquote>
1531 1541
 </div>
1532 1542
 </div>
1533
-<div id="outline-container-org7fb6463" class="outline-3">
1534
-<h3 id="org7fb6463">With Emacs</h3>
1535
-<div class="outline-text-3" id="text-org7fb6463">
1543
+<div id="outline-container-orga292b52" class="outline-3">
1544
+<h3 id="orga292b52">With Emacs</h3>
1545
+<div class="outline-text-3" id="text-orga292b52">
1536 1546
 <p>
1537 1547
 If you are an Emacs user then you can also read your RSS feeds via the <a href="https://github.com/dk87/avandu">Avandu</a> mode.
1538 1548
 </p>
@@ -1571,9 +1581,9 @@ And ensure that the Tor daemon is installed:
1571 1581
 </div>
1572 1582
 </div>
1573 1583
 </div>
1574
-<div id="outline-container-orgedc0a36" class="outline-2">
1575
-<h2 id="orgedc0a36">Git Projects</h2>
1576
-<div class="outline-text-2" id="text-orgedc0a36">
1584
+<div id="outline-container-org988b59e" class="outline-2">
1585
+<h2 id="org988b59e">Git Projects</h2>
1586
+<div class="outline-text-2" id="text-org988b59e">
1577 1587
 <p>
1578 1588
 Github is ok, but it's proprietary and funded by venture capital. If you been around on the internet for long enough then you know how this story eventually works itself out - i.e. badly for the users. It's really only a question of time. If you're a software developer or do things which involve the Git version control system then it's a good idea to become accustomed to hosting your own repositories, before the inevitable Github shitstorm happens.
1579 1589
 </p>
@@ -1609,9 +1619,9 @@ This will stop any spam accounts being created by random strangers or bots. You
1609 1619
 </p>
1610 1620
 </div>
1611 1621
 </div>
1612
-<div id="outline-container-orgb4cd0c8" class="outline-2">
1613
-<h2 id="orgb4cd0c8">Adding or removing users</h2>
1614
-<div class="outline-text-2" id="text-orgb4cd0c8">
1622
+<div id="outline-container-org7532960" class="outline-2">
1623
+<h2 id="org7532960">Adding or removing users</h2>
1624
+<div class="outline-text-2" id="text-org7532960">
1615 1625
 <p>
1616 1626
 Log into the system with:
1617 1627
 </p>
@@ -1639,9 +1649,9 @@ control
1639 1649
 </div>
1640 1650
 </div>
1641 1651
 
1642
-<div id="outline-container-org8a02c37" class="outline-2">
1643
-<h2 id="org8a02c37">Blocking Ads</h2>
1644
-<div class="outline-text-2" id="text-org8a02c37">
1652
+<div id="outline-container-orge4624b4" class="outline-2">
1653
+<h2 id="orge4624b4">Blocking Ads</h2>
1654
+<div class="outline-text-2" id="text-orge4624b4">
1645 1655
 <p>
1646 1656
 Everyone except for advertisers hates adverts. Not only are they annoying, but they can consume a lot of bandwidth, be a privacy problem in terms of allowing companies to track your browsing habits and also any badly written scripts they contain may introduce exploitable security holes.
1647 1657
 </p>
@@ -1651,9 +1661,9 @@ You can block ads for any devices connected to your local network by installing
1651 1661
 </p>
1652 1662
 </div>
1653 1663
 
1654
-<div id="outline-container-org3b4824f" class="outline-3">
1655
-<h3 id="org3b4824f">Set a static IP address</h3>
1656
-<div class="outline-text-3" id="text-org3b4824f">
1664
+<div id="outline-container-org1ac3294" class="outline-3">
1665
+<h3 id="org1ac3294">Set a static IP address</h3>
1666
+<div class="outline-text-3" id="text-org1ac3294">
1657 1667
 <p>
1658 1668
 Ensure that your system has a static local IP address (typically 192.168..) using the option on the control panel. You will also need to know the IP address of your internet router, which is usually <b>192.168.1.1</b> or <b>192.168.1.254</b>.
1659 1669
 </p>
@@ -1664,9 +1674,9 @@ When that's done select <b>About this system</b> from the control panel and see
1664 1674
 </div>
1665 1675
 </div>
1666 1676
 
1667
-<div id="outline-container-org3cf75e7" class="outline-3">
1668
-<h3 id="org3cf75e7">On each client system within your local network</h3>
1669
-<div class="outline-text-3" id="text-org3cf75e7">
1677
+<div id="outline-container-org2de5992" class="outline-3">
1678
+<h3 id="org2de5992">On each client system within your local network</h3>
1679
+<div class="outline-text-3" id="text-org2de5992">
1670 1680
 <div class="org-src-container">
1671 1681
 <pre class="src src-bash">sudo chattr -i /etc/resolv.conf
1672 1682
 sudo nano /etc/resolv.conf
@@ -1693,9 +1703,9 @@ Normally <i>resolv.conf</i> will be overwritten every time your reboot, but you
1693 1703
 </div>
1694 1704
 </div>
1695 1705
 
1696
-<div id="outline-container-org8d06d74" class="outline-3">
1697
-<h3 id="org8d06d74">On your internet router</h3>
1698
-<div class="outline-text-3" id="text-org8d06d74">
1706
+<div id="outline-container-org6a32590" class="outline-3">
1707
+<h3 id="org6a32590">On your internet router</h3>
1708
+<div class="outline-text-3" id="text-org6a32590">
1699 1709
 <p>
1700 1710
 If you can access the settings on your local internet router then this is the simplest way to provide ad blocking for all devices which connect to it.
1701 1711
 </p>
@@ -1706,9 +1716,9 @@ Edit the DNS settings and add the IPv4 address which you got from the control pa
1706 1716
 </div>
1707 1717
 </div>
1708 1718
 
1709
-<div id="outline-container-orgac391de" class="outline-3">
1710
-<h3 id="orgac391de">Configuring block lists</h3>
1711
-<div class="outline-text-3" id="text-orgac391de">
1719
+<div id="outline-container-org22e3a31" class="outline-3">
1720
+<h3 id="org22e3a31">Configuring block lists</h3>
1721
+<div class="outline-text-3" id="text-org22e3a31">
1712 1722
 <p>
1713 1723
 You can configure the block lists which the system uses by going to the <b>administrator control panel</b>, selecting <b>App Settings</b> then choosing <b>pihole</b>. You can also add any extra domain names to the whitelist if they're being wrongly blocked or to the blacklist if they're not blocked by the current lists.
1714 1724
 </p>