💾 Archived View for rawtext.club › ~sloum › geminilist › 001939.gmi captured on 2020-10-31 at 02:37:10. Gemini links have been rewritten to link to archived content

View Raw

More Information

⬅️ Previous capture (2020-09-24)

-=-=-=-=-=-=-

<-- back to the mailing list

TLS certificate sizes in Geminispace

jzs jzs at sketchground.dk

Fri Jun 26 16:40:04 BST 2020

- - - - - - - - - - - - - - - - - - - 

Hi there,

I am the author of cozylabs.eu.

However, the smallest certificate I have encountered belongs to
cozylabs.eu. It is 273 bytes, i.e. 20% of the average! Or, about 1 KiB
smaller than average. That's 1KiB less network traffic for each
request to that server compare to a typical server.
cozylabs.eu achieves this feat with a single self-signed ED25519
certificate. For folks who want to ditch the CA system and embrace
TOFU, this is clearly the way to do it. I will migrate
gemini.circumlunar.space to this style of certificate in the near
future.
Cheers,
Solderpunk

The code that i use to generate my certificate is as follows:https://git.sr.ht/~jzs/cozylabs.eu-gemini/tree/master/server.go#L263

It might serve as an inspiration to making a generic standalone certificategenerator for those interested.

Kind regards,Jens.