TLS, TOFU and the Gemini security model

[solderpunk]

> Just a quick correction: because elpher uses emacs' own TLS support, it
> *does* actually validate TLS connections, and warns users when the
> server is using a self-signed certificate.  I.e. it's a bit pickier than
> the speculative specification suggests. I'm looking to "downgrade" this
> to a TOFU system somepoint soon, seeing as self-signed certificates are
> expected to be the norm.  But in any case, MITM attacks should already
> be detectable, as far as I understand.

Whoops, thanks for the correction!

Of *course* emacs has built in TLS support. :p

Cheers,
Solderpunk