TLS, TOFU and the Gemini security model

[solderpunk]

> I agree that Let's Encrypt is easy to set up and I have done so for multiple websites.
> However, I think from a philosophical standpoint I, personally, would like gemini to
> be as free of centralized authorities as is possible. 

Yeah, me too, it's probably why I've continued to fly the TOFU flag for
so long.

In addition to decentralisation, I do think TOFU is actually
*conceptually* much simpler than CA-based validation.  It just isn't
simpler in terms of implementation because there's already a lot of
well-tested and pre-packaged code out there to do the CA heavy lifting.

Cheers,
Solderpunk