I got an email yesterday showing that one of my TLS certificates had failed to renew. Looking in the log - /var/log/letsencrypt/letsencrypt.log - I saw: 2022-04-12 Read more

Until a couple of weeks ago, I didn't really see the point in giving a .onion site a TLS certificate. Alec Muffett convinced me: HTTP-over-Onion should not be considered as secure as Read more

I set up a .onion hidden service site for our business years ago. Originally, it was a v2 onion - the older, defunct, but shorter, domains - and now it is a v3 domain, Read more

We should have better encryption. We should have encryption which can be readily circumvented. The web is the unregulated Wild West. We should reduce barriers to responsible innovation and reduce Read more

In the context of a prohibitions or limits on the deployment of end to end encryption, I've heard the argument that one should distinguish between: services which enable contact between "known" Read more

The government's #NoPlaceToHide campaign (I've intentionally not included a URL) got me thinking: if end to end encryption on popular messaging services was prohibited, how many users would be left Read more

Some time back, someone - sadly, I cannot remember who, but - asked if there was a good, neutral, explanation of the end to end encryption debate. I have not found one, and I think it would be Read more

I bought a PinePhone on eBay. Not the shiny new PinePhone Pro, but the original "convergence" model. My plan is that, if I can get this doing what I want, it gives me a good justification for getting Read more

This is one for me, as I have to look this up Every Single Time I want to change a LUKS passphrase. Note to self: it might be safer to add a new passphrase, and verify that works, and then - and only Read more

We've had yet another round of "online anonymity should be banned" over the weekend. It's one of those tropes which has not died the death it deserves, and it appears with such predictable regularity Read more