Today we'll set up a DoH forwarder which will act as DNS server that will accept queries and forward them to a DNS over HTTPS provider of your choosing. This is useful when you want to run a local forwarder so that your ISP or attackers cannot spy on- or [...]
You might have encountered websites with a pretty onion address that contains a human-readable prefix. I will show you how to get a custom onion address, using your GPU! Whats an onion address? An onion address can only be reached through Tor. It's like a domain name but which ends [...]
An SPF record is basically a DNS record of the TXT type, which contains information about who may send email from your domain. It is used to avoid spoofing and spam. So how does it work? Basically, when a (decent) email server receives an email that is supposedly originating from [...]
Pi-hole recently released an update that tells Firefox to bypass DoH, and this might be undesirable. I have the solution! Firefox basically checks for specific DNS records, and if found, will disable DNS over HTTPS. This can be useful if you're on a corporate network and have DNS servers in [...]
While VPN's are great for virtual private networks (hence the name), it is often overkill if you just want to bypass a firewall or get an encrypted tunnel to protect yourself from snooping (e.g. on public Wi-Fi). More often than not, a VPN is also a paid service unless you [...]
Revoking certain certificates on March 4th - 5th, 2020 UTC Due to a bug related to CAA checking in Let's Encrypt, millions of certificates will be revoked "today". To quickly check if your domains are affected, use this tool: https://checkhost.unboundtest.com/ If your domain is affected, you have to renew your [...]
I think this video is nice for people that are way over their head with "tech stuff", as it explains some basic settings that can improve your privacy and security in a few easy taps, and it's easy to follow. This is why I decided to post it here, in [...]
Status: sindastra.de is currently preloaded. What this means is that once it is included, your browser will know to access sindastra.de through HTTPS with valid certificate only! No exceptions! This is for your security. This also means there will be no HTTP to HTTPS redirect that could get manipulated in [...]
You might be running an OpenVPN server and found that your IPv6 clients get their IP leaked. I have a quick fix! The problem If your client machine has IPv4 only, you won't notice any problems. But if your client machine has IPv6, and your OpenVPN server is IPv4 only, [...]
So you think SSH is secure? Maybe not if you have a flawed config... But I have a solution! Meet Mozilla's ssh_scan! Mozilla provides a free scanner for SSH, which will quickly give you a grade and recommendations on how to improve your setup. The scanner needs to be downloaded [...]