• 1 Post
  • 26 Comments
Joined 2 years ago
cake
Cake day: September 14th, 2023

help-circle



  • I don’t trust cloudflare. That is just a JS CDN that pulls a file, but is still gathered from an external server. In my case, when I have to use CDNs to use a JS library, I just download the file and host it locally.

    You don’t own the CDN, is controlled by other people, which means that of course is less private to the end user, and more insecure since you rely on the people running the CDN and the author or the library. What would happen if the library author/authors get hacked and they add malicious code to the library? (Asumming it doesn’t contain a integrity attribute like the one on your example).

    Is better to trust yourself, it doesn’t cost you anything to download a few kB of a JS file and serve it directly from your server. The page is not going to load 2s faster if you use a JS CDN

    And no one wants this to occur to their websites: https://fossa.com/blog/polyfill-supply-chain-attack-details-fixes/












  • Yes. I host my own using Mailu.io. With the proper records, you will be able to send emails to any big email provider (proton, gmail, outlook). You need to pick a good TLD (.com, .net, .org, etc) so you don’t get your email thrown into the spam folder immediately.

    If you buy a domain now, you will probably get on the Spamhaus blacklist, which every big email service seems to use (again, proton, gmail, outlook, and probably others), so you will need to wait a few months and keep a good spam record (well, don’t send spam emails obviously and keep your email server with the proper configurations).

    Also, pick a good VPS provider (No vultr, no linode) with low levels of abuse, because if you setup your email server in an IP range with a lot of abusers, you may get your email flagged. (You can check that using https://www.uceprotect.net/en/rblcheck.php, but I’m not sure if uceprotect is trustable).