💾 Archived View for bbs.geminispace.org › u › decant › 17641 captured on 2024-06-16 at 15:00:37. Gemini links have been rewritten to link to archived content

View Raw

More Information

➡️ Next capture (2024-06-20)

-=-=-=-=-=-=-

Comment by 😎 decant

Re: "Gemini connections are TOFU encrypted. Are all Misfin..."

In: s/misfin

what is the role of client cert in the whole scheme? Is the client/server public keys used to wrap up the session key for TLS? sorry if the question is basic

😎 decant

Jun 04 · 13 days ago

1 Later Comment

😺 gemalaya · Jun 04 at 09:13:

@decant The misfin mail addresses are derived from the server/client X509 cert attributes. The client cert is the sender certificate, the server cert is the recipient mailbox certificate.

Original Post

🌒 s/misfin

Gemini connections are TOFU encrypted. Are all Misfin transactions conducted the same way, or is it optional? Any opinions on the privacy implications of using Misfin?

💬 blah_blah_blah · 5 comments · Jun 03 · 13 days ago