Food for thoughts... PREAMBLE This is entirely unrelated to either TLS, or TOFU, or the Gemini protocol per se. Just a possible usage convention, agreed between user-agents and participating services. INTRODUCTION Keybase provides a well thought off platform for identity proof, with easy integration, among other things: Proof Integration https://book.keybase.io/guides/proof-integration-guide Plus a full-fledged toolkit: Command Line https://book.keybase.io/guides/command-line And *nix friendly: Linux https://book.keybase.io/guides/linux And open source: https://github.com/keybase Thanks Keybase for sharing! USAGE In a nutshell, Gemini services could piggyback on Keybase to prove their identity and sign all text/gemini they emit. User-agents could in turn validate such signed text/gemini and visually indicate the outcome (exact details skipped for brevity). That's all. Nothing much to it actually. All the hard work has already been done by Keybase & friends :) P.S. There is also Keybase's saltpack & sigchain: https://saltpack.org https://book.keybase.io/docs/teams/sigchain https://keys.pub https://keys.pub/docs/specs/sigchain.html ?0?
---