• 45 Posts
  • 159 Comments
Joined 3 年前
cake
Cake day: 2022年1月3日

help-circle



  • I recommend it every time this question pops up and I’m surprised more people aren’t privy to it:

    Rent a VPS as your public gateway. Connect the VPS to your server with a simple wireguard tunnel.

    The only thing on the VPS should be a reverse proxy with SSL/TLS pass through.

    Send the traffic at the VPS reverse proxy to a reverse proxy on the main server. Configure this proxy to use letsencrypt certs.

    The benefit and importance of the SSL pass through reverse proxy, is that it allows all data in transit to remain encrypted until it reaches your physical server. Traditionally, most would suggest the one and only reverse proxy exist on the VPS but all traffic would then be decrypted on the VPS. This could obviously compromise your traffic if the VPS provider snoops or your VPS is compromised.

    Cloudflare tunnels decrypt on their hardware as well, which is why I always recommend avoiding their services.













  • I’ve used Tuta for years, paid account with multiple custom domains.

    I prefer them for their principles, but their clients are extremely frustrating. Emails load very slowly and their email search is basically unusable.

    I’ve resorted to downloading old emails and using other clients to import and search through them. I really wish they would improve their email search.





  • SDR is Standard Dynamic Range. This is how most media is viewed and has been viewed for decades, typically in the Rec709 color space. 99% of consumer devices display in SDR.

    HDR is a newer technology that expands the dynamic range passed Rec709 color space. It requires an HDR capable screen to display HDR content and most content is not distributed in this format, although this has been changing in the last few years.

    I personally find HDR kind of a gimmick, but my point is that HDR != HD. SDR/HDR describe contrast ratios and how many colors are rendered. SD/HD describe resolution.

    The chart does show them downgrading the plans from 4K/UHD to HD though.