[Tech] [Spec] TOFU or not TOFU?

[colecmac at protonmail.com]

Hello,

I have written about TOFU before, perhaps it can help?

gemini://makeworld.gq/gemlog/2020-07-03-tofu-rec.gmi

This part of TOFU is not perfect and never will be. For user-facing clients
like browsers it comes down to showing users a warning. For crawlers like
Lupa, I think that it should ignore cert changes entirely. There's no way for
a crawler to decide if it's legitimate or not, and a crawler doesn't need much
privacy as it's going to access everything anyway.


makeworld