[tech] Pre-generated trust stores for various Gemini clients

[Stephane Bortzmeyer]

On Fri, Jun 04, 2021 at 10:11:45AM -0700,
 panda-roux <contact@panda-roux.dev> wrote 
 a message of 224 lines which said:

> - What's your process for requesting the removal of a domain's certificate
> from this list?

I assume that capsules which no longer reply are removed after some
time. This is how the Lupa list used as input works: it contains only
capsules that were contacted successfully in the last weeks.

> - Does the software you're using to generate this list respond to any
> robots.txt directives (i.e. "don't index me" or "expire after x days")?

No need to do so: just retrieving robots.txt informs the crawler about
the certificate. No later connection is necessary.

> - Why circumvent TOFU?  I don't mean for this to come across as
> antagonistic, but doesn't this defeat the purpose of having a decentralized
> protocol in the first place?

It is precisely the decentralization that allows any one (nervuri,
you, me, anyone) to create such a list and such a repository. After
that, people use it if they want.