[spec] Oustanding issues
petite.abeille at gmail.com
Sun Jan 10 22:50:14 GMT 2021
> On Jan 6, 2021, at 09:25, Stephane Bortzmeyer <stephane at sources.org> wrote:
> * interactions between TOFU and valid certificates. For instance,
> should a client disable TOFU when the certificate is valid?
The current assumptions are wholly incoherent.
The interaction between TOFU and X.509, if any, must be thought through clearly.
This is not even half-baked. It's not baked at all.
More information about the Gemini