TLS, TOFU and the Gemini security model
Julien Blanchard julienblanchard at fastmail.fm
Tue Sep 24 20:29:12 BST 2019
> How do other people feel about this?
>
> What proportion of extant Gemini servers are already using Let's Encrypt
> certs?
>
> Cheers,
> Solderpunk
All in for TOFU and not re-creating what?s already used for the web, the SSH way looks good to me.
So far I only use a self-signed certificate but I also have let?s encrypt certificates for the web/mail stuff.
I don?t mind not re-using them for Gemini.
?
julienxx
Archive home | About this archive