[off-topic] [tech] talkat

[mbays]

* Saturday, 2021-10-02 at 06:15 -0700 - Chris Brannon <chris@the-brannons.com>:

> Jacob Stewart <jacob.stewart@tutamail.com> writes:
>
>>> If no client certificate is presented, the server MUST reject the connection.
>>> The server and client certificates are intended to identify the individual users involved.
>> What if the server operator wants to operate an anonymous chat?
>
> Nothing prevents you from generating a one-time cert, having multiple
> pseudonymous certs corresponding to various assumed identities, etc
> etc.  With client certs we can have both authentication and
> pseudonymity.

Exactly. In the htalkat implementation, you select an identity (or create a new one) by using the -d option or HTALKAT_DIR environment variable.

It's also easy to run as a tor hidden service, for additional anonymity.