3 ms·
> Gemini, being a recent protocol, mandates the use of TLS. There is no unencrypted version of Gemini available. Mandating the reliance on third parties in the
by perryizgr8 6y ago
> Gemini, being a recent protocol, mandates the use of TLS. There is no unencrypted version of Gemini available.
Mandating the reliance on third parties in the protocol itself does not seem to be a great choice. If I have a simple webpage which I use as a daily diary, why should I go to the trouble of asking a random third party to provide me with a certificate?
- vertex-four 6y agoGemini does SSH-style TOFU, you don't ask a third party for the certificate. From the spec: "Clients can validate TLS connections however they like (including not at all) but the strongly RECOMMENDED approach is to implement a lightweight "TOFU" certificate-pinning system which treats self-signed certificates as first- class citizens."