TLS, TOFU and the Gemini security model

Julien Blanchard julienblanchard at fastmail.fm
Tue Sep 24 20:29:12 BST 2019

> How do other people feel about this?
> 
> What proportion of extant Gemini servers are already using Let's Encrypt
> certs?
> 
> Cheers,
> Solderpunk

All in for TOFU and not re-creating what?s already used for the web, the SSH way looks good to me.
So far I only use a self-signed certificate but I also have let?s encrypt certificates for the web/mail stuff.
I don?t mind not re-using them for Gemini.

? 
julienxx


Archive home | About this archive