Browse Gemini here
A Gemini client inside this page
Click a Gemini search result or capsule link. The reader opens here, with Back, Reload and text-size controls. There is nothing to install. The client runs in your browser and uses OpenSSL to speak the actual Gemini protocol over TLS.
Try the address below or follow a search result. Capsule text and links are rendered locally in your tab. No remote scripts or styles run.
How the connection works
Browsers cannot open ordinary Gemini network sockets themselves. braigetori provides a restricted transport on Gemini ports. Gemini TLS is established between the client in your browser and the capsule; the transport carries encrypted bytes. It does not turn capsule pages into public HTML copies, index them or save your input. The capsule sees the transport server's network address.
The first visit accepts a capsule's self-signed certificate, as is common in Gemini. Its public-key fingerprint is remembered in this browser tab. If that key changes during the visit, the client stops and asks you to review the change before continuing. This is continuity checking, not verification of a person's identity. The website delivers the client code; the website and your browser remain part of the trust boundary.
Interactive capsules
Normal and private input prompts are handled in the reader. Private input is masked, sent inside Gemini TLS and omitted from the reader's address and navigation history. Do not enter information you do not trust the destination capsule to receive.
When a capsule asks for a client certificate, you can explicitly create a temporary identity in this tab. It is used only for that capsule address and addresses below it. The private key stays in the client, and the identity disappears when this page closes or reloads. It is unsuitable for an account you need to recover later. TLS 1.2 can expose the public client certificate on the network; the private key is never sent.
Why some connections can still fail
The embedded client requires JavaScript, WebAssembly and WebSockets, supported by current mainstream browsers. A capsule can still be offline, reject the shared network address or require an existing personal identity. braigetori supports the usual Gemini ports 1965 and 1966 and refuses private network destinations. Downloads are limited to 16 MiB; connections and concurrency are bounded.
With JavaScript disabled, the public web reader remains available for ordinary pages and observes capsule webproxy rules. It cannot display every interactive page. The embedded client is a personal, user-operated reader; it does not crawl or publicly republish visited pages.
For permanent identity management or alternative ports, a separate full-featured client remains an optional choice.