Removing expiry dates for TOFU
Solderpunk
solderpunk at posteo.net
Fri Jul 10 11:05:22 BST 2020
On Thu Jul 9, 2020 at 1:25 AM CEST, wrote:
> > What are the simpler ideas? Just straight up TOFU with a scary message
> > five years later?
>
>
> Yes, I see that as a lot simpler. It doesn't require a well known
> endpoint, or
> a background service for clients, etc. But I still like the idea.
I guess it will always be up to individual server admins to decide how
they want to balance the effort involved in different setups against
what kind of user experience they're happy for their visitors to have,
and how they perceive their risk of someone trying to impersonate them.
All we can really do is lay out the various options along the scale, and
perhaps recommend one in particular as the "go to" choice for people who
don't feel up to making the decision.
Cheers,
Solderpunk
More information about the Gemini
mailing list