• 0 Posts
  • 65 Comments
Joined 16 days ago
cake
Cake day: February 5th, 2025

help-circle



  • I don’t think the SPF / DKIM / DMARC stuff is overly complex nor the core of the problem.

    It’s not the core of the issue, but the average joe that is a hobbyist self-hoster it will be.

    IMO, the core issue is that there is no standard whatsoever. People just do whatever the hell they want with these records, pretty much. Microsoft and Google do it differently than each other, even.

    The only solution for me is that we move on from email as a society.













  • I’m just not convinced it can fool google and meta

    Yea, this is a great and healthy skepticism to have. It’s why I went deep on this little research tangent.

    Besides browser fingerprinting, there are many other ways to tie you to online behavior. For instance, the DAITA thing has nothing to do with browser fingerprints, but specifically the size of your inbound and outbound traffic. The NSA uses that to figure out your behavior and link on-VPN and off-VPN traffic together with great success, regardless of how many hops you go through. It’s the behavior that gives you away.

    I’m always on my VPN, reconnect at random times, and have all the extras turned on. Something else that may be a factor is that I have Mullvad Browser installed via Flatpak and is sandboxed to hell. Maybe you installed via .deb or something in Mint?

    Any way, thanks again for humoring me in this! I think you’re right that at least you are sorta getting lumped in with others, but it’s never going to be 100% foolproof and we should all plan for that.