Privacy

31876 readers

577 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

Chat rooms

[Matrix/Element]Dead
Discord

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

Privacy basics, can anyone help? (lemm.ee)

submitted 1 year ago by Kidplayer_666@lemm.ee to c/privacy@lemmy.ml

20 comments fedilink hide all child comments

Hello there! Im looking for increased privacy when it comes to my network connections. So far I know of TOR as an almost absolute bastion of security, but how do I ensure the remaining network traffic is encrypted and private? I know of signal for communication, and I’m aware of VPN’s. However I’m not sure whether to trust most providers regarding government interference as their software often isn’t open source. Is there a federated VPN of sorts, similar to how lemmy and other fediverse apps work?

you are viewing a single comment's thread
view the rest of the comments

[–] ______@lemm.ee 2 points 1 year ago (3 children)

I know you guys are technical and smart. Can you explain to me how secure https is in terms of privacy. I heard that isps can track which domain you're hitting but not the exact endpoint, is this true ? Where can I read more about this sort of thing?

[–] jet@hackertalks.com 1 points 1 year ago

Https is based on the web of trust. You're trusting each of the central certificate authorities not to issue a certificate incorrectly.

So if you're doing something sensitive enough that somebody might compromise their certificate authority for then HTTPS is not the be all end all.

There was a fun program that the Great firewall of China was running, they would look at where you were sending traffic, and then do a man in the middle attack giving you a different certificate so that they can see what you were actually saying unencrypted.

[–] gutter564 1 points 1 year ago

Some more info and helpful blogs from mullvad https://mullvad.net/en/help/all-about-dns-servers-and-privacy/

You can use quad9 or mullvad DNS resolvers for free to prevent DNS leaks

[–] randombullet@feddit.de 1 points 1 year ago

No all of your packets will have a destination IP address. Meta data isn't encrypted for an HTTPS.