TLS, TOFU and the Gemini security model

[Julien Blanchard]

> My takeaway regarding TOFU:
> - A tofu system was pretty trivial to set up
> - It seems to work pretty well
> - It took a bit to figure out how I wanted to handle certificates expiring
> - It leaves the client to determine how strict they want to be (will they allow a user to still retrieve data even with a bad cert?)
>
Thanks a lot for the feedback! Your devlog entry will help me a lot 
adding TOFU to Asuka.

> Lastly, for any interested parties, Bombadillo now has a website and gopherspace (it will have a gemini mirror as well, just as soon as I get jetforce to work for me... I had some issues, but will be working through them):
> http://bombadillo.colorfield.space
> gopher://bombadillo.colorfield.space

Bombadillo 2 is really cool, great work!