I'm going to suggest a very different approach, partly because you say FiL lives a long way away and only see him 1-2 times a year, and also because you baby is so young. I am assuming this means FiL never comes to see you and you visit him; if that's not the case then this suggestion probably won't work.
Which is to simply wait. Cross the bridge of this debate when (if) your husband suggests a trip to FiL with your child. And then refuse to go. Flatly refuse and have the argument then.
Because I wonder if your husband will gradually come around to your way of thinking. He may just need some time to process it all. He's a new parent, only just coming to grips with the responsibilities that brings. Your protective instincts have been building for a long time, as you carried the baby, but his may only just now be developing and growing now your baby is in the world. At the point a potential visit to his father comes up, it may well hit him like a truck just how terrible an idea that is and how much he needs to protect his child. He might at that point willingly go no-contact or decide to only see his father without you and your child present. If not, have the knock down argument then.
If there is any chance FiL might come to visit you where you live, especially without warning, then clearly that's a whole different story and you need to have the debate and agreements up front now. No contact at all is clearly the best approach. If however you and husband simply cannot agree then your proposals ago a long way to reducing the risk, other than the fact your child as they get older may question the reasons for such restrictions.
I do partly understand why your husband is behaving this way; children are pre-programmed to love and bond to their parents no matter what and even the most horrifically abused kids still want a relationship. Ask anyone working in child protection. In his case he also grew up with it all being minimised and seeing his father after the divorce, so as an adult it takes an enormous emotional shift to accept the enormity of what his father did and cut contact, even for the sake of his own child. Time might just work more than anything other reasoning might.