TLS by default; plain Protocol A only after the user agrees #40

Merged

littlefox merged 3 commits from issue-39-tls into main 2026-10-17 11:04:40 +00:00

Conversation 0 Commits 3 Files changed 35 +759 -61

littlefox commented 2026-10-17 10:37:20 +00:00

Owner

Copy link

Closes #39

Built on #38 (FAQs); merge that first.

TLS by default (D-026), plain Protocol A only after the user agrees.

What exists: lyskomd 2.1.2 and upstream have no TLS. The Emacs client tunnels through ssh instead. kom.lysator.liu.se:4894 is plain, and no other TLS port answers. So against kom.lysator.liu.se you'll see the question until Lysator puts a TLS front end such as stunnel in place.

Client:

• Desktop: rustls (ring), Mozilla roots, plus optional NEOKOM_TLS_CA.
• Browser: kom-relay does the TLS and closes with 4001/4002 on no TLS or a bad certificate.
• Login: always tries TLS. On "no TLS" it asks; "Kom ihåg för den här servern" is optional. A server that had TLS before always gets a downgrade warning, with no remember option. A bad certificate is an error and never falls back.
• Top bar: shows TLS / TLS från reläet / Okrypterad, with an SVG padlock.

Tests:

• Devserver: stunnel on 4896 with a test CA (devserver/tls, key discarded); the image is already pushed to the registry.
• e2e: all specs now run over TLS. tls.spec.ts covers the default TLS connection, confirm/cancel/remember, and the downgrade warning (33/33).
• Integration test tls_front_end: TLS works, plain port gives NotTls, unknown CA gives a certificate error.
• Desktop smoke test over TLS: passed locally.
• CI uses lyskomd:4896.

🤖 Generated with Claude Code

https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Closes #39 Built on #38 (FAQs); merge that first. TLS by default (D-026), plain Protocol A only after the user agrees. **What exists:** lyskomd 2.1.2 and upstream have no TLS. The Emacs client tunnels through ssh instead. kom.lysator.liu.se:4894 is plain, and no other TLS port answers. So against kom.lysator.liu.se you'll see the question until Lysator puts a TLS front end such as stunnel in place. **Client:** - **Desktop:** rustls (ring), Mozilla roots, plus optional `NEOKOM_TLS_CA`. - **Browser:** kom-relay does the TLS and closes with 4001/4002 on no TLS or a bad certificate. - **Login:** always tries TLS. On "no TLS" it asks; "Kom ihåg för den här servern" is optional. A server that had TLS before always gets a downgrade warning, with no remember option. A bad certificate is an error and never falls back. - **Top bar:** shows TLS / TLS från reläet / Okrypterad, with an SVG padlock. **Tests:** - Devserver: stunnel on 4896 with a test CA (devserver/tls, key discarded); the image is already pushed to the registry. - e2e: all specs now run over TLS. tls.spec.ts covers the default TLS connection, confirm/cancel/remember, and the downgrade warning (33/33). - Integration test tls_front_end: TLS works, plain port gives NotTls, unknown CA gives a certificate error. - Desktop smoke test over TLS: passed locally. - CI uses lyskomd:4896. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

littlefox added 6 commits 2026-10-17 10:37:21 +00:00

Post images: pick, scale to the server's limit, send ... ae53de722a

Like jskom (D-024): the composer takes an image file, keeps it as it is
when it already fits, otherwise scales it down on a canvas to a JPEG.
The canvas works the same in the browser and the desktop webview. Alone
the image is posted the elisp/jskom way (subject line plus raw image);
with a caption it is posted as multipart/mixed. The server's text limit
is learnt from string-too-long, and sending re-scales and retries once.

Refs #33

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Merge main into issue-33-post-images a2b29a063a

README: what NeoKOM does now, packages, other servers, all test kinds ... 7311183649

Requested by the user: the README still described an early reader.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Unread FAQs first on entering a conference, remembered the elisp way ... 50b5d71316

Entering a conference queues its unread FAQs (faq-text) ahead of
reading. Showing a text with faq-for-conf records it as read with
elisp-client-read-faq on the letterbox, exactly as the Emacs client
does, so both clients agree (D-024). The server's FAQs are queued at
login.

Refs #35

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Record D-026: TLS by default, plain only after confirmation ... 185752f3ae

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

TLS by default; plain Protocol A only after the user agrees ... 1d436f1be2

lyskomd has no TLS of its own and kom.lysator.liu.se has no TLS front
end today (D-026), but the client now always tries TLS first. If the
server doesn't answer in TLS, the login page asks before connecting
unencrypted, optionally remembering the answer per server. A server that
had TLS before always gets a downgrade warning instead. Untrusted
certificates are errors, never a reason to fall back.

Desktop does TLS itself (rustls/ring); in the browser, kom-relay does it
and reports "no TLS" with WebSocket close code 4001. The devserver gains
an stunnel port (4896) with a test CA, so e2e, the desktop smoke test,
the integration tests and CI all run over TLS and test the fallback.

Refs #39

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

littlefox added 1 commit 2026-10-17 10:49:50 +00:00

Merge main into issue-39-tls 572e97e32e

littlefox merged commit b0eebd0532 into main 2026-10-17 11:04:40 +00:00

littlefox referenced this pull request 2026-10-17 11:04:41 +00:00

TLS by default, plain Protocol A only after confirmation #39

littlefox referenced this pull request from a commit 2026-10-17 11:04:41 +00:00

Merge pull request 'TLS by default; plain Protocol A only after the user agrees' (#40) from issue-39-tls into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

area/ci

Forgejo Actions, runner, tests

  

area/desktop

Desktop build

  

area/packaging

Arch, Debian, Fedora, NixOS packages

  

area/protocol

kom-proto, wire format, charset

  

area/reading

Unread tracking, reading order, review

  

area/ui

Dioxus app, layout, interaction

  

area/web

Web build and relay

  

area/writing

Composing and sending texts

  

kind/bug

Something is broken

  

kind/feature

New functionality

  

kind/infra

Tooling, tests, CI, dev environment

  

kind/request

requests for features or changes from users

  

needs/user

Waiting for a decision or action from littlefox

  

parked

Kept for reference; no work planned until the user says so

  

perf

Run the perf workflow and its budgets on this pull request (#287)

  

security

Security-relevant

  

upstream

A proposal for Protocol A or lyskomd, for the LysKOM development group

No labels

area/ci

area/desktop

area/packaging

area/protocol

area/reading

area/ui

area/web

area/writing

kind/bug

kind/feature

kind/infra

kind/request

needs/user

parked

perf

security

upstream

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

littlefox/neokom!40

No description provided.