<-- back to the mailing list

Malicious Links

nervuri nervuri at disroot.org

Tue Jul 13 17:29:13 BST 2021

- - - - - - - - - - - - - - - - - - - 

On Sat, 2021-07-10, nervuri wrote:

Client-side: never use a client certificate when following a link from
outside the client certificate's scope, as defined in section 4.3 of the
spec. This rule could be added to the spec itself.

Here we go:

https://gitlab.com/gemini-specification/protocol/-/issues/37