Ditching mandatory TLS

solderpunk solderpunk at SDF.ORG
Sat Jul 4 22:59:44 BST 2020
On Sat, Jul 04, 2020 at 05:56:19PM -0400, Sean Conner wrote:

> > I don't really know much about cjdns or noise, but Yggdrasil just looks
> > like an ordinary IPv6 tunnel and requires nothing special from software.
> 
>   If that's the case for Yggdrasil, then you are *still* using TLS over it
> (and it's not a replacement for TLS).

You're right, it's not a replacement - running Gemini without TLS over
Yggdrasil would break any client certificate apps.  No alternative is
going to keep those working.  TLS is baked in pretty deep.

Cheers,
Solderpunk


Archive home | About this archive