Comment

Comment on Do you selfhost your own blog/website?

JubilantJaguar@lemmy.world ⁨1⁩ ⁨month⁩ ago

You still need encryption between your CDN and your origin, ideally using a proper certificate.

It can be self-signed though, that’s what I’m doing and it’s partly to outsource the TLS maintenance. But the main reason I’m doing it is to get IP privacy. WHOIS domain privacy is fine, but to me it seems pretty sub-optimal for a personal site to be publicly associated with even a permanent IP address. A VPS is meant to be private, it’s in the name. This is something that doesn’t get talked about much. I don’t see any way to achieve this without a CDN, unfortunately.

I guess it’s popular because people already use Github and don’t want to look for other services?

Yes, and the general confusion between Git and Github, and between public things and private things. It’s everywhere today. Another example: saying “my Substack” as if blogging was just invented by this private company. So it’s worse than just laziness IMO. It’s a reflexive trusting of the private over the public.

source

Sort:hotnew top

dan@upvote.au ⁨1⁩ ⁨month⁩ ago

it seems pretty sub-optimal for a personal site to be publicly associated with even a permanent IP address

What’s the downside you see from having a static IP address?

I don’t see any way to achieve this without a CDN, unfortunately.

I think you’re looking for a reverse proxy. CDNs are essentially reverse proxies with edge caching (their main feature is that they cache files on servers that are closer to a user), but it sounds like you don’t really care about the caching for your use case?

I don’t know if any companies provide reverse proxies without a CDN though.

source
- JubilantJaguar@lemmy.world ⁨1⁩ ⁨month⁩ ago
  
  What’s the downside you see from having a static IP address?
  
  What’s the downside to having one’s phone number in the public directory? There’s no security risk and yet plenty of people opt out. It’s personally identifying information.
  
  I don’t know if any companies provide reverse proxies without a CDN though.
  
  Exactly.
  
  source
  - dan@upvote.au ⁨1⁩ ⁨month⁩ ago
    
    What’s the downside to having one’s phone number in the public directory?
    
    The difference is that an IP of a VPS doesn’t directly connect back to you. It’s in the provider’s name. Some providers let you change your IP address to a different one for a small fee.
    
    source
    JubilantJaguar@lemmy.world ⁨1⁩ ⁨month⁩ ago
    Yes yes, I know all that. The fact remains that a permanent IP associated with an individual is personally identifying information. Even the variety in browser requests counts as such according to the GDPR, and that is usually pooled with lots of other users. This is clearly a level above that. It’s why, for example, I would not use the VPS for proxy web browsing: zero privacy.
    
    source