eshmaki.me · TLS 1.3 · Online · online · channels

Nexus

Next-generation IRC on the IRCX protocol. Group video, SASL auth, chat history, 25 themes. TLS 1.3 — runs entirely in your browser.

users online
channels
1
server
TLS 1.3
encrypted
IRCX IRCv3 SASL SCRAM-SHA-256 CHATHISTORY WebRTC WSS/TLS Ophion

Everything you need from IRC, extended.

IRCX Protocol

Channel properties (PROP), access control lists (ACCESS), whisper messaging, and auditorium mode (+x). All IRCX extensions fully live.

Group Video

WebRTC mesh video in video-enabled channels (+V mode). Browser-native P2P — no plugins, no downloads, no server relay required.

SASL Auth

SCRAM-SHA-256, SCRAM-SHA-512, PLAIN, and EXTERNAL (client certificate). Every major IRC client supported out of the box.

Chat History

IRCv3 CHATHISTORY replays your scrollback across reconnects and device switches. Context is always there when you come back.

25 Themes

Abyss, Synthwave, Rosé Pine, Solarized, Dracula, Vapor, Daylight, Slate, Terminus and more — themes that actually feel right.

IRCv3 Capabilities

Multi-prefix, echo-message, message-tags, batch, account-notify, extended-join and more. Modern IRC, fully implemented.

Server Ophion — custom IRCX daemon
Modes +q owner · +o op · +v voice · +x auditorium · +V video · +S TLS-only
Services Built-in NickServ · no external dependency

Join the network in seconds.

Quick Connect
No account required
TLS 1.3 · eshmaki.me:6697 · SASL when password is set
Server eshmaki.me
TLS port 6697
WebSocket wss://eshmaki.me:443
Plain port 6667 not recommended
01
Connect as guest

Enter any nickname and hit Connect. Public channels are open to everyone.

02
Register your nick
/register <password> <email>
03
Enable SASL

Enter your password in the Connect form — Nexus uses SCRAM-SHA-256 automatically.

04
IRCX channel control
/access #chan list
/prop #chan *

SASL — secure login on every connect.

Supported mechanisms — SCRAM is recommended (credentials never sent in plaintext). EXTERNAL uses a client TLS certificate for passwordless login.

SCRAM-SHA-256 SCRAM-SHA-512 PLAIN EXTERNAL
1
Open Settings

Click the gear icon in the top-right corner.

2
Authentication tab

Select SASL as the login method.

3
Enter credentials

Username = registered nick · Password = account password.

4
Save & reconnect

Nexus negotiates SCRAM-SHA-256 on every connect automatically.

Shortcut: enter your password in the Quick Connect form — SASL is used automatically.

# Add network
/network add -sasl_mechanism scram-sha-256 \
             -sasl_username  YourNick \
             -sasl_password  YourPassword \
             IRCXNet

# Add server
/server add -auto -tls -tls_verify \
            -network IRCXNet \
            eshmaki.me 6697

# Connect
/connect IRCXNet

irssi 1.2+ supports SCRAM-SHA-256 natively. Use sasl_mechanism plain for older versions.

# Add server
/server add IRCXNet eshmaki.me/6697 -ssl

# Configure SASL
/set irc.server.IRCXNet.sasl_mechanism scram_sha_256
/set irc.server.IRCXNet.sasl_username  YourNick
/set irc.server.IRCXNet.sasl_password  YourPassword
/set irc.server.IRCXNet.autoconnect    on

# Connect
/connect IRCXNet

WeeChat 3.x supports SCRAM-SHA-256 and SCRAM-SHA-512. Use plain for older versions.

1
Network List

Settings → Network List (Ctrl+S).

2
Add network

Name it IRCXNet, server eshmaki.me/6697, enable SSL.

3
Login method

Select SASL (username + password) from the dropdown.

4
Credentials

Username = nick · Password = registered password. Click Close.

HexChat uses SASL PLAIN. All traffic is still encrypted over TLS 1.3.

Client certificate authentication (SASL EXTERNAL) — log in without ever typing a password.

# 1. Generate an Ed25519 client certificate
openssl req -x509 -newkey ed25519 \
  -keyout ~/.irc/client.key \
  -out    ~/.irc/client.crt \
  -days 3650 -nodes \
  -subj "/CN=YourNick"

# 2. Get the SPKI SHA-512 fingerprint
openssl x509 -in ~/.irc/client.crt \
  -noout -pubkey \
  | openssl pkey -pubin -outform DER \
  | openssl dgst -sha512 -binary \
  | xxd -p -c 64

# 3. Add fingerprint to your account
/fingerprint add spki_sha512:<fingerprint>

# 4. Connect with SASL EXTERNAL (irssi)
/network add -sasl_mechanism external \
             -tls_cert ~/.irc/client.crt \
             -tls_pkey ~/.irc/client.key \
             IRCXNet

Ophion uses spki_sha512 fingerprints (SPKI DER hash, not raw cert hash).

Server info & live channels.

Server
eshmaki.me
TLS port
6697
WebSocket
wss :443
Protocol
IRCX + IRCv3
Daemon
Ophion
Nick services
Built-in
TLS version
1.3 (6697 · 443)
SASL
SCRAM · PLAIN · EXTERNAL
Channel statistics
Loading channels…