30 ms·
Can TLS certificates in the way that Gemini uses them be used to track end users?
by yladiz 5y ago
Can TLS certificates in the way that Gemini uses them be used to track end users?
- bawolff 5y agoPresumably? I haven't read the gemini spec or know how they use them, but the entire point of a tls certificate (whether client or server) is to give a persistent identity that can't be faked. Edit: found the spec - https://gemini.circumlunar.space/docs/specification.html https://gemini.circumlunar.space/docs/specification.html Sounds like they're passing the buck a bit to the client. Client can decide how long lived, so its up to the user if they want to use a long lived identity or a short lived one. Doesn't sound all that different from cookies to me. In old web browsers you were always prompted if you wanted to accept each and every cookie. Everyone clicked yes so web browsers stopped asking. This seems the same.