feat: check it out and use "TOFU" (trust on first use) for self-signed certificates

[oleonardolima]

Instead of just ignoring and not validating the self-signed certificates, we probably should use the "TOFU" (trust on first use) for the self-signed certificates.

[oleonardolima]

see: frostsnap/frostsnap#278