Three month spec freeze

Sean Conner sean at conman.org
Wed Jun 3 01:59:00 BST 2020


It was thus said that the Great Petite Abeille once stated:
> 
> 
> > On Jun 2, 2020, at 22:59, plugd <plugd at thelambdalab.xyz> wrote:
> > 
> > Is this really necessary?
> 
> TLS in general? A minimum version of it? Not really.
> 
> But mandating a secure channel of sort is value added.
> 
> That said, mandating TLS only is perhaps counterproductive.
> 
> After all, how do I run Gemini over wireguard now? With TLS on top?
> Because the spec forces me to? Oh, my...

  Wireguard is a VPN implementation, not specifically a protocol. And as
with other people who have questioned the use of TLS, show us an
implementaion.  Get a Gemini server working over wireguard.  Or both
wireguard *and* TLS.  Because as it is, I have no idea how to go about this,
nor any easy means to test it.

> Perhaps Gemini should mandate a secure transmission channel, and then
> define a profile of it in the specification., say TLS vs TLS >= 1.3 vs
> wireguard vs whatnot.

  Again, the devil is in the details, and we need some more details about
this.

  -spc (And then convince the gopher people who are working hard to get TLS
	working that *that* protocol ... )


More information about the Gemini mailing list