Enhancing TOFU

Petite Abeille petite.abeille at gmail.com
Fri Mar 5 12:54:06 GMT 2021



> On Mar 5, 2021, at 13:47, Drew DeVault <sir at cmpwn.com> wrote:
> 
> Why use a technical solution when a social solution would be suitable? A
> much easier way is to simply announce the upcoming cert change in your
> gemlog.

Because of the scale of the network.

Such "social" approach works in the small, but doesn't scale.

It simply moves the problem around: now the burden of proof is on the user to check some sort of "announcements" and act on it meaningfully. Each and every single time.

In my personal experience, this will never fly.

YMMV for sure.

±0¢



More information about the Gemini mailing list