And what is the advantage of that?

Also I am pretty sure I have at least some secrets in my shell history

Lol, exact same situation here.

Quick question, did the migration to continuwuity break calls for you as well?

This comment section is… something.

If you host the bridges yourself, it makes no difference to privacy.

It’s simply convenient to have all chats in one place 🤷🏼‍♀️

You will simply not be able to install anything, unless the FOSS dev is cool with providing their ID to Google, and agrees to its ToS, and Google likes the app and signs it.

Which many devs (myself included) will definitely NOT be.

TBH, it sounds like you have nothing to worry about then! Open ports aren’t really an issue in-and-on itself, they are problematic because the software listening on them might be vulnerable, and the (standard-) ports can provide knowledge about the nature pf the application, making it easier to target specific software with an exploit.

Since a bot has no way of finding out what services you are running, they could only attack caddy - which I’d put down as a negligible danger.

My ISP blocks incoming data to common ports unless you get a business account.

Oof, sorry, that sucks. I think you could still go the route I described though: For your domain example.com and example service myservice, listen on port :12345 and drop everything that isn’t requesting myservice.example.com:12345. Then forward the matching requests to your service’s actual port, e.g. 23456, which is closed to the internet.

Edit: and just to clarify, for service otherservice, you do not need to open a second port; stick with the one, but in addition to myservice.example.com:12345, also accept requests for otherservice.example.com:12345, but proxy that to the (again, closed-to-the-internet) port :34567.

The advantage here is that bots cannot guess from your ports what software you are running, and since caddy (or any of the mature reverse proxies) can be expected to be reasonably secure, I would not worry about bots being able to exploit the reverse proxy’s port. Bots also no longer have a direct line of communication to your services. In short, the routine of “let’s scan ports; ah, port x is open indicating use of service y; try automated exploit z” gets prevented.

I am scratching my head here: why open up ports at all? It it just to avoid having to pay for a domain? The usual way to go about this is to only proxy 443 traffic to the intended host/vm/port based on the (sub) domain, and just drop everything else, including requests on 443 that do not match your subdomains.

Granted, there are some services actually requiring open ports, but the majority don’t (and you mention a webserver, where we’re definitely back to: why open anything beyond 443?).

Client side, under advanced:

That’s a setting

What does this have to do with Privacy?

InfCloud. Works well with Radicale, and does contacts, too.

It’s not pretty, but works very well for the 5/100 times I want to check through a browser instead of Calendar app / Thunderbird.

Yes. Using simple-nixos-mailserver as the foundation.

Really great experience, and have had no deliverability issues.

Some might say interconnecting everything could be a legitimate goal. Nonetheless, some people started to report about huge amounts of data and metadata being sent to Matrix central servers.

Curious that this claim is without source in the original.

I also have porblems with their claims about bridges. Bridges are Band-Aids to allow you to communicate with people not on Matrix, not a dark masterplan to build a central spionage hub.

By default, a homeserver trusts matrix.org in questions of federation and identity of other servers. You have to get that trust from somewhere. You are free to choose another source for that.

(For example, my homeserver isn’t federated at all, and has that trusted server removed; it doesn’t communicate with anyone. Also it’s not synapse, but that’s besides the point.)

That’s great.

Please beware that DNS over TLS is transport protection; the dns server itself of course still sees and knows everything.

Fühl ich, Bruder.

Baby steps: I wish it was mandated that any software receiving even a penny in public funding must be open source down to the last byte.

You are probably half-joking, but… yeah.

I fucking hate this timeline. Actually, scratch that, that is way to placid and abstract.

I hate the assholes in charge. Fuck all of them. Luigi did nothing wrong.

My blood glucose monitor is not on the play store. So one dy next year I’ll wake up and no longer be able to get that data…?