Re:Gemini is a little gem
by spc476 on Wednesday January 26, 2022 @02:51PM
(#30090754)
But gopher doesn't have TLS. Yes, there are clients that attempt to make TLS connections to gopher servers and will fall back to plain TCP on failure, but that's a hack (and a pretty annoying one at that).
[ Parent
| on HN ]
Re:Gemini is a little gem
by owroomexorcist on Wednesday January 26, 2022 @03:05PM
(#30090951)
What's wrong with not having TLS? If it's just for hobbiests to share text documents, why include a TLS layer?
Re:Gemini is a little gem
by capableweb on Wednesday January 26, 2022 @03:07PM
(#30090970)
Suddenly you can't trust anything you're being served as there are so many endpoints you could be MITM'd at. Reading a text about some experience someone had? Snippets from that text could have been replaced if you are not using any cryptographic protocol what so ever.
Re:Gemini is a little gem
by owroomexorcist on Wednesday January 26, 2022 @03:10PM
(#30091009)
Fair point. But if we're talking about a protocol not meant for the mainstream, is it really an attack vector to worry about?