• 4 Posts
  • 119 Comments
Joined 2 years ago
cake
Cake day: December 28th, 2023

help-circle
  • Fair point ! Yeah sure if you host a blog online it doesn’t make sense… But if you only self-host your services for family and some friends and access them over VPN, a local CA is actually a privacy respecting choice.

    Hosting something on the web (specially self-hosted) without the propre software and hardware is a bad idea in the first place anyway !


  • N0x0n@lemmy.mltoSelfhosted@lemmy.worldHow to selfhost with a VPN
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    22 hours ago

    I also believe it’s possible to set up HTTPS encryption without a domain name, but it might result in that “we can’t verify the authenticity of this website” warning in web browsers due to using a self-signed certificate.

    Just create your own rootCA and IntermediateCA and sign your certificate with those, put the CA in your trust store of your system and get rid of this self-signed warning on every device and happily access all your service via: *.home.lab or whater ever local domain pleases you.


  • N0x0n@lemmy.mltoSelfhosted@lemmy.worldHow to selfhost with a VPN
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    1
    ·
    22 hours ago

    In addition to that, without a secure connection you’re stuck with HTTP/1.1

    That’s not entirely true. A lot of requests, even with https, are send over HTTP/1.1. And this is kinda mind blowing that in 2025 we still rely on something so old and insecure…

    Same goes with SMS and the old SS7 protocol from 1970… 2FA SMS is probably the most insecure way to get access to your bank account or what ever service promotes 2FA sms login.



  • It really takes 5min tops ! But only if you know what you are doing. Immich is not an easy compose stack for beginners. There’s also all the other stuff you have to take care off (backup? Behind proxy? Share with people outside your lan? …).

    Having the compose stack up and running is just the first step ^^ but once you get the hang off, it’s fun and really cool stuff floating arround (navidrome, pihole, home assistant, newpipe, vaultwarden, jellyfin…)

    It takes some time to get comfortable but don’t give up, it’s worth it !




  • Yeah… Newer genration are into “put everything in 1 big messed up directory and find all you needs by tags” structure.

    I get the gist, but calling directory structure evil is kinda extreme. It allows to structure your thoughts and if somehow your metadata is corrupted, you still have a directory structure.

    I work on both front for compatibility issues but nothing beats a well thought directory structure!!









  • Tech literates people tend to be more aware, but people who don’t even know what OS means/is…

    I’m the only person in my family that has some IT knowledge and believe it or not, everyone in my family things that way… While swipping, scrolling, posting on GAFAMs and publicly exposing all their life ^^. In my friends circle it’s the same… Those who don’t know what an OS is respond the same way.

    So it’s mostly the lack of knowledge of what privacy is, in the digital world… Because in real life most people put curtains behind their windows, so people won’t snoop on your hidden secrets.




  • N0x0n@lemmy.mltoPrivacy@lemmy.mlPlease, Kill Emails (and Phone Numbers)
    link
    fedilink
    arrow-up
    41
    arrow-down
    1
    ·
    edit-2
    17 days ago
    Sorry, you've been blocked. Your IP address has been flagged for abuse.
    
    Please enable JavaScript to continue.
    
    Something went wrong, and we couldn't create your account. Please start over.
    
    Your account has been flagged as spam.
    

    My god how many times have I been through this… Living with debloated phone, hardened browser, VPN, Linux, sure isn’t easy every day :/// !

    I totally agree, It shouldn’t be soo hard to value your own data/privacy and sometimes it feels like I’m fighting the wind.