From f36f803d42f934c6d5ba087606b3181ddeba8b93 Mon Sep 17 00:00:00 2001
From: reverse <mike.chevronnet@gmail.com>
Date: Mon, 24 Aug 2026 22:25:08 +0000
Subject: [PATCH] whois: show client-cert fingerprint (276) to everyone, not
 just opers/self

---
 src/coremods/core_info.rs | 15 +++++++--------
 1 file changed, 7 insertions(+), 8 deletions(-)

diff --git a/src/coremods/core_info.rs b/src/coremods/core_info.rs
index d4d6ae5..b66d146 100644
--- a/src/coremods/core_info.rs
+++ b/src/coremods/core_info.rs
@@ -416,15 +416,14 @@ impl Command for Whois {
                 &format!("{nick} :is using a secure connection{detail}"),
             );
         }
-        // client-cert fingerprint (CertFP) — shown to the user themselves and opers
+        // client-cert fingerprint (CertFP) — visible to everyone; it's derived from
+        // the certificate the client presents in the handshake, not a secret.
         if let Some(fp) = &certfp {
-            if is_self || asker_oper {
-                s.numeric(
-                    uid,
-                    RPL_WHOISCERTFP,
-                    &format!("{nick} :has client certificate fingerprint {fp}"),
-                );
-            }
+            s.numeric(
+                uid,
+                RPL_WHOISCERTFP,
+                &format!("{nick} :has client certificate fingerprint {fp}"),
+            );
         }
         // 317: idle time + signon time (hidewhois may suppress it)
         if !(hide && crate::modules::hidewhois::hide_idle(s)) {