3 ms·
Neat. Project Gemini: https://gemini.circumlunar.space/docs/specification.html https://gemini.circumlunar.space/docs/specification.html 4.2 Server certificat
by jakeogh 4y ago
Neat. Project Gemini: https://gemini.circumlunar.space/docs/specification.html https://gemini.circumlunar.space/docs/specification.html
4.2 Server certificate validation
Clients can validate TLS connections however they like (including not at all) but the strongly RECOMMENDED approach is to implement a lightweight "TOFU" certificate-pinning system which treats self-signed certificates as first- class citizens. This greatly reduces TLS overhead on the network (only one cert needs to be sent, not a whole chain) and lowers the barrier to entry for setting up a Gemini site (no need to pay a CA or setup a Let's Encrypt cron job, just make a cert and go).
I'm surprised to not see an optional response size field in the response header. How does the client calculate progress%? Reading....