TLS, TOFU and the Gemini security model

[plugd]

solderpunk writes:
> To the best of my knowledge, all extant clients take the "not at all"
> route.

Just a quick correction: because elpher uses emacs' own TLS support, it
*does* actually validate TLS connections, and warns users when the
server is using a self-signed certificate.  I.e. it's a bit pickier than
the speculative specification suggests. I'm looking to "downgrade" this
to a TOFU system somepoint soon, seeing as self-signed certificates are
expected to be the norm.  But in any case, MITM attacks should already
be detectable, as far as I understand.

plugd