💾 Archived View for bbs.geminispace.org › s › misfin › 5640 captured on 2024-02-05 at 10:42:21. Gemini links have been rewritten to link to archived content
⬅️ Previous capture (2023-12-28)
-=-=-=-=-=-=-
I wonder how misfin messages are replyable, the client does not have to run on the same address as the server and the sender domain is not provided in the client cert unless it is set in a SAN field
2023-09-27 · 4 months ago
@alexlehm You're right, apart from the SAN there's no way to tell, that's what the main implementation uses to determine the sender's address. But IMO it's good enough, if the SAN is invalid ,well, you just can't be reached ...
🤖 alexlehm [OP] · Sep 27 at 16:46:
I guess I should add logging of the SAN from the certificate to my server