💾 Archived View for gemi.dev › gemini-mailing-list › 000136.gmi captured on 2024-08-18 at 23:31:48. Gemini links have been rewritten to link to archived content

View Raw

More Information

⬅️ Previous capture (2023-12-28)

-=-=-=-=-=-=-

Updates to Gemini best practices

1. solderpunk (solderpunk (a) SDF.ORG)

Hello again!

I have also just made changes to the official "best practices" document
at:



There is a new section on TLS cipher suites wherein it is recommended
that anybody who is supporting TLS 1.2 (which is optional according to
the spec, but more or less a practical requirement at this point in
order to be able to communicate with clients/servers using e.g. LibreSSL
or BearSSL) supports only a minimal subset of it to provide similar
security to TLS 1.3.

This might be a nice thing for server testing tools (like
gemini-diagnostics) to optionally test!

Cheers,
Solderpunk

PS: You can all guess what the next email will be...

Link to individual message.

---

Previous Thread: Updates to Gemini FAQ

Next Thread: [SPEC-CHANGE] Small housekeeping updates