• curl tofu, Trust On First Use
• Weakness
• For all TLS based transfers
• If run A fails with a CA-cert error
• If run B fails with a CA-cert error
• If run C fails with a CA-cert error
• Cleanup Mode
• $CURLTRUST
• What to store for a site
• Requirements
• Other notes