It still has to transit networks, and I’m assuming they’re using the internet.
Anymore, all comms (even local), should be encrypted.
Comment on Selfhosted messenger/community software like discord
MangoPenguin@lemmy.blahaj.zone 6 months ago
Do you even need E2EE if it’s a private server with no federation? It seems like transport encryption would be fine which almost everything has.
BearOfaTime@lemm.ee 6 months ago
poVoq@slrpnk.net 6 months ago
That is what transport encryption does.
MangoPenguin@lemmy.blahaj.zone 6 months ago
Yeah most things support transport encryption, SSL for example with HTTPS.
crony@lemmy.cronyakatsuki.xyz 6 months ago
That’s a fine but, as long as the server was hosted at my personal devices, which it isn’t but on a hetzner dedicated box. Which is still better than on shared pc’s.
Don’t really need it, it’s just nice to have.
Vent@lemm.ee 6 months ago
If you’re worried about unauthorized access to the physical machine, you could always just do disk-level encryption instead or store the app’s data in something like a Veracrypt virtual disk. They’d still be able to access the data if they go through your OS/user, but wouldn’t pick anything up by accessing the drive directly.
Nothing short of E2EE can truly stop someone from accessing your data if they have physical access to the server, but disk encryption would require a targeted attack to break, and no host is wasting their time targeting your meme server. I seriously doubt they’d access it even if you had no encryption at all, since if they get caught doing that they’d get in a heap of legal trouble and lose a ton of business.
crony@lemmy.cronyakatsuki.xyz 6 months ago
That’s why I said E2EE is nice to have, but not required.