95
[Discussion] Which privacy apps / services do you think are most likely US government honeypots? (lemmy.ml)
submitted 5 months ago by to c/privacy@lemmy.ml
97 comments fedilink hide all child comments
 

IE like Crypto AG:

In 2020, it was revealed that the Swiss company, Crypto AG, which provided secure communications services to ~120 governments throughout the 20th century, was secretly ran by the CIA and West German Intelligence. The CIA and later NSA were able to read encrypted communications for many countries such as Saudi Arabia, Iran, Italy, Indonesia, Iraq, Libya, Jordan and South Korea.

you are viewing a single comment's thread
view the rest of the comments
[–] 15 points 5 months ago (5 children)

Sometimes I think that DNS providers could be, like NextDNS (I use them).

  • permalink
  • fedilink
  • source
  • hideshow 5 child comments
    •
  • [–] 6 points 5 months ago (3 children)

    I wish there was a possible way to run an authoritative DNS yourself. The best I can do is a recursive server blah.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 5 points 5 months ago (2 children)

    Yeah, that would be perfect. I thought some time ago about doing a DoT port -> nginx -> pihole -> unbound inside a cloud VM for the outside world , like this, but that would be too much work and maybe insecure.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 5 months ago (1 child)

    You can tunnel your DNS requests via wireguard to your pihole server. If it has good bandwidth even the full traffic. Why would that be insecure?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 5 months ago

    Yeah, using a VPN would be good enough, but I want it to be open to the internet, without any port/config restriction, so I can access it from any device and anywhere, so the only remaining thing would be to host and open the port on a VM, only DoT and DoH, no :53 open (that would really be insecure, as DDoS insecure).

  • permalink
  • fedilink
  • source
  • parent