💾 Archived View for rawtext.club › ~sloum › geminilist › 005910.gmi captured on 2024-02-05 at 11:05:42. Gemini links have been rewritten to link to archived content

View Raw

More Information

⬅️ Previous capture (2021-11-30)

-=-=-=-=-=-=-

<-- back to the mailing list

Updated recommendations regarding TOFU & TLS

Drew DeVault sir at cmpwn.com

Thu Mar 4 17:45:40 GMT 2021

- - - - - - - - - - - - - - - - - - - 
True. Especially because no one verifies the resulting certificate at all. Easy-peasy indeed.
Actually, one could not bother at all as there is no chain of trust to speak of. Even easier.
What's the point? Honest question.
What's the [threat|trust|usage] model?
https://en.wikipedia.org/wiki/Threat_model

https://en.wikipedia.org/wiki/Trust_on_first_use

See also section 4.2 of the Gemini specification:

gemini://gemini.circumlunar.space/docs/specification.gmi