• 0 Posts
  • 48 Comments
Joined 2 years ago
cake
Cake day: June 4th, 2023

help-circle




  • Assuming that you trust what Proton says, when they receive a (possibly unencrypted) message they re-encrypt it with your key as soon as possible and they don’t log the content. So, after that point, they (or anyone else) can’t read the email contents. If it was also encrypted in transit, then there’s only a small window inside their email processing system where the plaintext was passed from one encryption to the other. It’s only decrypted again in your browser or proton mail app with the key that only you have. It’s not bulletproof, but it’s better than most providers.



  • Your domain name could be ordered to be removed from US-based dns providers, no matter which TLD it is. That would essentially block your website from most US-based viewers without actually shutting down your hosting. Advanced users could still get to it, though. Consider hosting through Tor and a .onion address for more resiliency.








  • I second this. You need physical ethernet cable for the length of your house. Hard-wire anything that needs uninterrupted access. Then install multiple WiFi access points as needed for WiFi coverage. All WiFi access points can use the same WiFi SSID name. Note the difference between a “router” that connects to your internet provider and may also provide WiFi, vs a WiFi “access point” which only provides WiFi. You need one router and multiple access points connected to each other via physical ethernet cable. Keep in mind that even the best WiFi, being a wireless radio connection, will occasionally have dropouts due to radio interference. Prefer 5GHz channels over 2.4GHz channels for less interference. Another commenter recommended the Ubiquiti UniFI line, and I agree. Just avoid the cloud-based login that they try to push, and use a local-only login.

    Edit: the “buy it for life” option is hard-wired (CAT-6 or better) ethernet everywhere. Wireless is convenient, but ultimately less reliable.