Selfhosted
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam posting.
-
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
-
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
-
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
-
No trolling.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
view the rest of the comments
What would be the possible alternatives to block chain?
Assuming you're talking about authentication:
I'm deciding if the first is sufficient or if I actually need some form of blockchain to prevent tampering.
Thanks for your thoughts on this.
I am not sure how Matrix handles keys but it is a real headache for end users. For me at least
With openid, etc, it's decentralized compared with centralized and distributed, so you wouldn't get stuck with one openid provider.
I don't know much about any of these so thanks for developing for the rest of us.
Yeah, I'm thinking of having a separate key per device, and there would be a registry that ties them together. Usernames would not be unique, so to tell two users with the same name apart, the app would check the post signature against the keys in the registry.
This should prevent name squatting, but it would enable pretending to be another user. As long as user names aren't very important (i.e. it's closer to Reddit than Twitter/Facebook), this is probably fine and similar to what we have on Lemmy (only unique to your instance).
If we want to guarantee unique usernames, we would probably need to use a consensus system like blockchain. But blockchain has other drawbacks and I'd really rather not go that route.
Which one we go with doesn't really impact my moderation plans, so I'm going with pub keys for now because they're dead simple. It's also nice that it'll keep working if your country disconnects you from the internet, and someone could smuggle in data from outside if you really wanted to.
The first is sufficient. You only need to see someone's public key once, then you cache it and can authenticate all future signed messages.
I just need to think about potential attack vectors. I think issues can be worked around, but I've spent most of my time thinking about how to create something and less about how to protect it from attack.
But yeah, public key crypto w/o a central database is my first choice, blockchain is my second.
Federation.
I thought Blockchain was how the protocol knew how to federate, e.g. where to find other users. (?) I don't really remember how Blockchain works but iirc it is a way to verify trust, e.g. this person really is /u/sem because our shared document says they are.
I know DNS is an alternative but it kind of sucks. Bluesky is inventing it's open DiD thing for identity and it is centralized in practice but might be a good system. And I have no idea how it works.
Projects with blockchains work like BITtorrent to find peers. That's why bitcoin was called BITcoin.
Federation doesn't require blockchain. Blockchain was created for a very unique solution to storage of digital cash transactions that's not relevant in almost any other system's storage.
Reading the white paper you find the "serverless" has servers. Each community needs to be always online to serve captchas to posters. The system is federated on community level, instead of instance level, and uses DHT instead of DNS.
Holochain is an interesting option I haven't seen mentioned.