💾 Archived View for bbs.geminispace.org › u › ERnsTL › 1692 captured on 2023-11-14 at 10:42:47. Gemini links have been rewritten to link to archived content
⬅️ Previous capture (2023-11-04)
-=-=-=-=-=-=-
Re: "Verification of Sender Certificate"
Thanks @jeang3nie for your clarifications and that there still is work to be done on cert verification (empty message loop etc.)
Jun 08 · 5 months ago
Verification of Sender Certificate — Greetings, maybe I oversaw this in the spec, but if a client connects with a TOFU / self-signed certificate for chuck@norris.com is there any verification done to ensure that the client is not spoofing the sender address? I could think of something like a back-connection to a kind of "misfin MX" record (well SRV record would be perfect for that) and checking if the presented client certificate is signed by the norris.com server certificate.