From 34622783836b7d9f95356c6f61b6638cb7e14115 Mon Sep 17 00:00:00 2001 From: moritztk <36471066+moritztk@users.noreply.github.com> Date: Sat, 30 Nov 2019 15:45:01 +0000 Subject: [PATCH 01/10] calendar_contacts: add DecSync as worth mentioning (#1530) Co-Authored-By: nitrohorse <1514352+nitrohorse@users.noreply.github.com> --- _includes/sections/calendar-contacts-sync.html | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/_includes/sections/calendar-contacts-sync.html b/_includes/sections/calendar-contacts-sync.html index 907fb7b8..37b49891 100644 --- a/_includes/sections/calendar-contacts-sync.html +++ b/_includes/sections/calendar-contacts-sync.html @@ -60,4 +60,8 @@
  • cloud backups - Consider regularly exporting your calendar and or contacts and backing them up on a separate storage drive or uploading them to cloud storage (ideally after encrypting them).
    • + +
  • + DecSync - DecSync can be used to synchronize RSS, contacts, and calendars without a server by using file synchronization software such as Syncthing. +
    • From 40335b9e3d7257bb33886e67b17d069f8c6bb036 Mon Sep 17 00:00:00 2001 From: Jonah Aragon Date: Sat, 30 Nov 2019 13:06:56 -0600 Subject: [PATCH 02/10] Add security warning to email lists (#1543) --- pages/providers/email.html | 9 +++++++++ pages/software/email.html | 9 +++++++++ 2 files changed, 18 insertions(+) diff --git a/pages/providers/email.html b/pages/providers/email.html index 5c8d1577..ff4aac33 100644 --- a/pages/providers/email.html +++ b/pages/providers/email.html @@ -5,4 +5,13 @@ title: "Best Secure Email Providers for Privacy" description: "Find a secure email provider that will keep your privacy in mind. Don't settle for ad-supported platforms. Never trust any company with your privacy, always encrypt." --- +
    +
    Warning
    +
    +

    Even when using end-to-end encryption technology like GPG, email is inherently insecure and should not be trusted for sensitive communications. Metadata is always communicated in plaintext, and even when encryption is used correctly it is very easy for either party to acidentally respond to or forward a previously encrypted message in plaintext in many clients. GPG also does not easily support modern crypto functionality such as key rotation and forward secrecy.

    +

    We recommend the following email providers for routine notifications and messages from other services that require an email address. For communications that need to be safe and secure, you should use a dedicated instant messaging tool, such as Signal.

    + Recommended Instant Messengers +
    +
    + {% include sections/email-providers.html %} diff --git a/pages/software/email.html b/pages/software/email.html index 1c9d9921..147ad114 100644 --- a/pages/software/email.html +++ b/pages/software/email.html @@ -5,6 +5,15 @@ title: "Email Clients" description: "Discover free, open-source, and secure email clients, along with some email alternatives you may not have considered." --- +
    +
    Warning
    +
    +

    Even when using end-to-end encryption technology like GPG, email is inherently insecure and should not be trusted for sensitive communications. Metadata is always communicated in plaintext, and even when encryption is used correctly it is very easy for either party to acidentally respond to or forward a previously encrypted message in plaintext in many clients. GPG also does not easily support modern crypto functionality such as key rotation and forward secrecy.

    +

    We recommend the following email providers for routine notifications and messages from other services that require an email address. For communications that need to be safe and secure, you should use a dedicated instant messaging tool, such as Signal.

    + Recommended Instant Messengers +
    +
    + {% include sections/email-clients.html %} {% include sections/email-alternatives.html %} From 26b33824610b0f81e7e598e2ddc2449975848b6d Mon Sep 17 00:00:00 2001 From: Daniel Nathan Gray Date: Sat, 30 Nov 2019 19:08:24 +0000 Subject: [PATCH 03/10] Update IVPN with current audit information (#1547) --- _includes/sections/vpn.html | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/_includes/sections/vpn.html b/_includes/sections/vpn.html index 94860ea9..54a43e3b 100644 --- a/_includes/sections/vpn.html +++ b/_includes/sections/vpn.html @@ -56,7 +56,7 @@

    We are currently undergoing a complete security audit of our VPN applications by a reputable Swiss security company. The results of the audit will be summarized in a public report for cases like this.

    Marc Loebekken, ProtonVPN AG Legal counsel
    -

    We will reevaluate this listing at the end of 2019 or when the aforementioned report has been published, whichever is sooner. +

    We will reevaluate this listing at the end of Q1 2020 or when the aforementioned report has been published, whichever is sooner.

    526+ Servers

    ProtonVPN has 526 servers in 42 countries at the time of writing this page. Typically the more servers a provider offers, the better: With hundreds of servers in operation, you are far more likely to find a fast connection and a server geographically closest to you.

    Accepts Bitcoin
    @@ -76,8 +76,7 @@

    IVPN USD $100/Year

    IVPN is another strong premium VPN provider, and they have been in operation since 2009. IVPN is based in Gibraltar and offers a 3 day free trial. Unfortunately, due to its lack of an independent security audit, it does not meet the complete criteria for recommendation, see our notes below.

    No Security Audit
    -

    IVPN has undergone a no-logging audit from Cure53 which concluded in agreement with IVPN's no-logging claim. However, IVPN has not undergone a more comprehensive security audit by an independent third party, and therefore cannot be strongly recommended at this time. We have still chosen to list it on this page with the assumption that an audit will be published soon: The IVPN team reportedly plans to begin the process in September.

    -

    We will reevaluate this listing at the end of 2019 or when the aforementioned report has been published, whichever is sooner. +

    IVPN has undergone a no-logging audit from Cure53 which concluded in agreement with IVPN's no-logging claim. However, IVPN has not undergone a more comprehensive security audit by an independent third party, and therefore cannot be strongly recommended at this time.

    We have still chosen to list it on this page with the assumption that an audit will be published soon. IVPN has hired Cure53 to undertake a comprehensive audit covering the IVPN website, public and internal server infrastucture. They expect the audit to begin in November 2019 and be completed by the 6 auditors in January 2020.

    77+ Servers

    IVPN has 77 servers in 31 countries at the time of writing this page. Typically the more servers a provider offers, the better. IVPN has a decent (but not exceptional) server count that will most likely provide adequate coverage to most users.

    Accepts Bitcoin
    From d8275b4ce1872303d469b9beb8cd12a00ee71410 Mon Sep 17 00:00:00 2001 From: djoate <56777051+djoate@users.noreply.github.com> Date: Sun, 1 Dec 2019 04:30:52 +0000 Subject: [PATCH 04/10] Fix typos in email.html (#1550) --- pages/providers/email.html | 2 +- pages/software/email.html | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pages/providers/email.html b/pages/providers/email.html index ff4aac33..83a821a0 100644 --- a/pages/providers/email.html +++ b/pages/providers/email.html @@ -8,7 +8,7 @@ description: "Find a secure email provider that will keep your privacy in mind.
    Warning
    -

    Even when using end-to-end encryption technology like GPG, email is inherently insecure and should not be trusted for sensitive communications. Metadata is always communicated in plaintext, and even when encryption is used correctly it is very easy for either party to acidentally respond to or forward a previously encrypted message in plaintext in many clients. GPG also does not easily support modern crypto functionality such as key rotation and forward secrecy.

    +

    Even when using end-to-end encryption technology like GPG, email is inherently insecure and should not be trusted for sensitive communications. Metadata is always communicated in plaintext, and even when encryption is used correctly it is very easy for either party to accidentally respond to or forward a previously encrypted message in plaintext in many clients. GPG also does not easily support modern crypto functionality such as key rotation and forward secrecy.

    We recommend the following email providers for routine notifications and messages from other services that require an email address. For communications that need to be safe and secure, you should use a dedicated instant messaging tool, such as Signal.

    Recommended Instant Messengers
    diff --git a/pages/software/email.html b/pages/software/email.html index 147ad114..b973e515 100644 --- a/pages/software/email.html +++ b/pages/software/email.html @@ -8,7 +8,7 @@ description: "Discover free, open-source, and secure email clients, along with s
    Warning
    -

    Even when using end-to-end encryption technology like GPG, email is inherently insecure and should not be trusted for sensitive communications. Metadata is always communicated in plaintext, and even when encryption is used correctly it is very easy for either party to acidentally respond to or forward a previously encrypted message in plaintext in many clients. GPG also does not easily support modern crypto functionality such as key rotation and forward secrecy.

    +

    Even when using end-to-end encryption technology like GPG, email is inherently insecure and should not be trusted for sensitive communications. Metadata is always communicated in plaintext, and even when encryption is used correctly it is very easy for either party to accidentally respond to or forward a previously encrypted message in plaintext in many clients. GPG also does not easily support modern crypto functionality such as key rotation and forward secrecy.

    We recommend the following email providers for routine notifications and messages from other services that require an email address. For communications that need to be safe and secure, you should use a dedicated instant messaging tool, such as Signal.

    Recommended Instant Messengers
    From 084b92cd4a39260263ed348e6c4dad578faf8968 Mon Sep 17 00:00:00 2001 From: Daniel Nathan Gray Date: Sun, 1 Dec 2019 06:01:21 +0000 Subject: [PATCH 05/10] Remove neomailbox (#1553) --- _includes/sections/email-providers.html | 20 -------------------- assets/img/provider/Neomailbox.png | Bin 1997 -> 0 bytes 2 files changed, 20 deletions(-) delete mode 100644 assets/img/provider/Neomailbox.png diff --git a/_includes/sections/email-providers.html b/_includes/sections/email-providers.html index ff47be96..8e35c78e 100644 --- a/_includes/sections/email-providers.html +++ b/_includes/sections/email-providers.html @@ -103,26 +103,6 @@ Yes - - - Neomailbox - - - WWW - - 2003 - - - Switzerland - - - 1 GB - $ 49.95 - Accepted - Built-in - Yes - - Posteo diff --git a/assets/img/provider/Neomailbox.png b/assets/img/provider/Neomailbox.png deleted file mode 100644 index 662c36b03107b08e03663875cf623c1deb638a1e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1997 zcmV;;2Qv7HP)=;l{?sd3kxMsi};NjK{~vwzjtH?ChJHo0^)M#MKqr000MA zNklFzZ&Gd!1|=7-;F@{TAKUq=$qAK=ch!dAMAQZ15In=DCk8H6q}lGTZSCBh4U?vErSAwu7!8j(Xy zJh-!6-F{uIR!u7#S;<4s^B_ivJ#U?oHZg&fn*Q}PN9FFqtW<9& zp&dlyeuX4?N5vOT zcnV;v1PhI}3$qa7bvDN>N+Y5^kz};yQy;hI#HY<|j4I zWiI${mF8^!fy6j4OoeUYdE7H%TXi_pw`Q7v8GQ$LNVAH;m zgGyzuofUKPyV-m;bJ`Gey^%t==M>!B3As1iXgnSUqp|LYfNfXvXEYg=2q$ner`Z=> z`YLqd;E*yf-Mjt!_D5$v7oxXBm~@y3)v5Enp-N)c#dx<|S4f9PVy@=TBk9KH2xEl+ zXwp@c`*d#pT=E#EMpfZqXgSadOzEhnZ+-iseuulY6bT)oCmfl&&>yM*_l7%Aiklcw zyh&jELN**PFO(0LTqt!1GrIjMz=`WCS8T!T;e+}4Q5he#^3+92r~~FAi<9k>OF-xV zd^r+B#3^qU%E*sjmas<9oD3)!Shd_eV^vKE(P_GVc$@ zEhDMe5ZgWpRWd0$)D2SAndJP(G`GDkg1+M*DmM7y7^nsNj9<$6nnqWVxbI7>`zOf0 z@i+GP7KL|Y<&r@Ema9a;Z;W{gn!_ds(kO0a%`uiLx zxx@bq0yc@yk;WAmp8rTF10#lE5C(dMumReC$ng65dZi#s!Z^upC`>LhZ%Z;=OPBv z&t_j{>y;enn${uoB*3Q~0jVi4%q7E5-2ui;bdQv-XWtT&KrIlYAXw4u-fnC(Cbk5d~^huya5Ig2kJXuGHoq!r0Hx&qZg$Z;?y^vFo9 za8d&O!dH5u5{`C+zbZJnjfX7)c0;utq<2EE`X8KFTJJo8sZMgQ6K-m}gf2)NnFlXl z(@?<{$8?CaoE5|043MxSQ^aR#+rD$vyoF4i!yuC^htGl>8~5?#mT4GziYUFmyD~6B z7=~fs4Cw~Z{zKx|UvkV4phqff%T*NPsh~KWyW`|FN7Ys3NXfJD=1v>0+KV+X+1jpY zY+lETjj9B_E3bx8fyL9^C=cTQ3j9(R9C;=<9T1z;~|n|;SXn!`ybVciGI|2 zLd3U%t~2K_wPSGYHsKGE6h5aeaujh)yFysG!Q%9x%rR`7>l4D_{wW)?9wKQm<=vp1 zT0I*ljtK-)7$k9?^V!5h{4vGc%sU|l>-|F{O3&L^itjp_l~+0Bo=>clMdfV$y61a= f49)^h*vj$)bo-km$?#Zo00000NkvXXu0mjfORC0C From 905c2e5deb925e42e7a7c2aa9397c7f81684e77a Mon Sep 17 00:00:00 2001 From: Jonah Date: Sun, 1 Dec 2019 00:50:04 -0600 Subject: [PATCH 06/10] Enforce Certificate Transparency --- nginx/010-headers.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nginx/010-headers.conf b/nginx/010-headers.conf index 12f9c347..95424841 100644 --- a/nginx/010-headers.conf +++ b/nginx/010-headers.conf @@ -5,5 +5,5 @@ add_header Content-Security-Policy "default-src 'none'; script-src 'self' https: add_header Strict-Transport-Security "max-age=31557600; includeSubDomains; preload"; add_header 'Access-Control-Allow-Origin' '*'; add_header Alt-Svc 'h2="privacy2zbidut4m4jyj3ksdqidzkw3uoip2vhvhbvwxbqux5xy5obyd.onion:443"; ma=86400; persist=1'; -add_header Expect-CT 'max-age=0'; +add_header Expect-CT 'max-age=86400, enforce'; add_header Referrer-Policy "strict-origin"; From c4b0c4ed23b3c699d2974bec05bd48dbd9e042bb Mon Sep 17 00:00:00 2001 From: Dawid Potocki Date: Sun, 1 Dec 2019 10:15:15 +0000 Subject: [PATCH 07/10] Fix collapsing navbar dropdown when clicking another element (#1552) JavaScript was checking if element clicked is exactly .nav-summary, which isn't a problem when just clicking text inside it, but if we try to click another element inside like , it won't work, since now this span is clicked, not .nav-summary. Closes #1549 --- assets/js/main.js | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/assets/js/main.js b/assets/js/main.js index 548d1dd9..1aa56caf 100644 --- a/assets/js/main.js +++ b/assets/js/main.js @@ -25,7 +25,11 @@ function navSectionsToggle() { function navSectionsClose(event) { // Hide all dropdowns when clicking in different place - if (event.target.matches(".nav-summary")) return; + if ( + event.target.matches(".nav-summary") || + event.target.parentNode.matches(".nav-summary") + ) + return; navSections.forEach(navSection => { navSection.open = !open; }); From bd9f7b4a8301c7d5a022bf3565cb500f33faba0e Mon Sep 17 00:00:00 2001 From: Dawid Potocki Date: Sun, 1 Dec 2019 15:04:19 +0000 Subject: [PATCH 08/10] Change website button from image to HTML (#1554) --- _includes/sections/dns.html | 114 ++++++++++++++++-------- _includes/sections/email-providers.html | 69 +++++++++++--- assets/css/style.scss | 9 +- assets/img/layout/www.png | Bin 2120 -> 0 bytes assets/img/layout/www.svg | 1 - 5 files changed, 143 insertions(+), 50 deletions(-) delete mode 100644 assets/img/layout/www.png delete mode 100644 assets/img/layout/www.svg diff --git a/_includes/sections/dns.html b/_includes/sections/dns.html index 26b12213..9718d5d4 100644 --- a/_includes/sections/dns.html +++ b/_includes/sections/dns.html @@ -33,8 +33,10 @@ - - WWW + + Commercial @@ -51,8 +53,10 @@ - - WWW + + @@ -81,9 +85,13 @@ - - WWW - +
    + +
    Hobby Project No @@ -108,8 +116,10 @@ - - WWW + + @@ -136,8 +146,10 @@ - - WWW + + Commercial @@ -161,8 +173,12 @@ - - WWW +
    + Association @@ -186,8 +202,10 @@ - - WWW + + Hobby Project @@ -227,8 +245,10 @@ - - WWW + + Non-Profit @@ -263,8 +283,10 @@ - - WWW + + Commercial @@ -303,8 +325,10 @@ - - WWW + + @@ -322,8 +346,10 @@ - - WWW + + @@ -344,8 +370,10 @@ - - WWW + + Hobby Project @@ -355,8 +383,10 @@ No No - - WWW + + @@ -377,8 +407,10 @@ - - WWW + + Non-Profit @@ -411,8 +443,10 @@ - - WWW + + Hobby Project @@ -444,12 +478,14 @@ - - WWW + + - + Informal collective @@ -491,9 +527,13 @@ - - WWW - +
    + +
    Hobby Project No diff --git a/_includes/sections/email-providers.html b/_includes/sections/email-providers.html index 8e35c78e..94ad17e6 100644 --- a/_includes/sections/email-providers.html +++ b/_includes/sections/email-providers.html @@ -27,7 +27,11 @@ Disroot - WWW + + + 2015 @@ -47,7 +51,11 @@ Kolab Now - WWW + + + 2010 @@ -68,7 +76,11 @@ - WWW + + + 2014 @@ -88,7 +100,11 @@ Mailfence - WWW + + + 2013 @@ -108,7 +124,11 @@ Posteo - WWW + + + 2009 @@ -128,8 +148,19 @@ Protonmail - WWW - Tor + + + + + + 2013 @@ -150,7 +181,11 @@ - WWW + + + 1999 @@ -170,7 +205,11 @@ Soverin - WWW + + + 2015 @@ -190,7 +229,11 @@ StartMail - WWW + + + 2014 @@ -210,7 +253,11 @@ Tutanota - WWW + + + 2011 diff --git a/assets/css/style.scss b/assets/css/style.scss index 8ec6e563..5e82a96d 100644 --- a/assets/css/style.scss +++ b/assets/css/style.scss @@ -204,12 +204,19 @@ footer { .btn-icon { + display: flex; + justify-content: center; font-size: 1.5rem; padding: 0.5rem; border-radius: 0.25rem; display: flex; height: 2.4rem; - color: #ddd; + width: 2.4rem; + color: #eee; +} +.btn-icon:hover { + text-decoration: none; + color: #fff; } .btn-tor { diff --git a/assets/img/layout/www.png b/assets/img/layout/www.png deleted file mode 100644 index ba318b3a89c8f232dd5aaf95c5788c8d59b6c9ac..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2120 zcma)6`8U)JAN>vnnJ8&NPl#ln#**e0vW%Uv?~E;bmNfQl#8`^b5VB{<@(dFalV$8l zJ(h|zh6c&VV`&}+F*C2{y#K&^&gXvaIrsi_&pqd6Ss{)1`9%2u0N^(nm?PZ0(VYYc(Ib2Wi z>`kXlPX`sdC6lG1s-XO>i8uK0g(bX05I)k9H4u(+b^f98*X1iMnbMi3C92a^3tvJk7C52N7+M}w1SbU!_zeM5nc2N^JSQm} z&#!lM%xELUF()IRz5xjcq&$)ICB%2%oc%gS@^@h}fwbm`W+XU3^thK3;l|GQ001iW zFF-N1x1x?k9<+&t0nak8Foata^~zAK{`WobW6RQ;JTjh)%DH&8$v%Sex>=J`LBHSvK^KOFteu^?V{q582;xu{b3*|d` z;m72@1094mD zETN>V@zv18+U9`*)R1;;fxOL(5I`pQk}&{)9ZV3qb}{6Q66fefjkB1*c#TtC^^-2a zMj7P-NUB@IK9kKxivy4WVn_Q_X=LG{g{O4IJ0v6b&Y)BN#(e5>o~kv}U*;`O*W5_* zD1+62w?po+bG%lKXC#bnCexDEt!A!dxH>c0xa(sCG&{c4;j8Q4Y^xc?jN(HNiCH23 z);bfmirQT>wRZ*DVB`A!M*(@BmYN@V!fy+ww$+?kc z6vlm7=UQLNUHk>=EPM(Q?p?YDhN~jl?f~k*MGSu*w`U-RV!>>>Sst@+o09lv;k|Y6 z%f|8iH1o2?c6Cg|oQ(caRICzk!<{7?8oL5qXnINbS_#=9Ko4~~#B)sEqm=r5;Jcx< z5>RtR!9z|rIXjA#h?pa9ZZKDJZ>+SWbfvr`ohu(vb5>y7HPjx!dNSq}1O;QUfk?y< zeewF_xb?QK*L8pa+h^;tU-0}z#d39>I!-pAweQryUlZ=2+c*5j$oDnr5 zP3c~`S~|@TsySwcnAwd`mGB0U3~KmbcL7Ri1m*_jb?m80n1SJB&O%P*HJfK3N=Zm& zzTV|NPK-~w1hSt4RaIzF&8^e2gv=A~jwNK(gF20pWWkeS!220O|Deq49y3jF%EG^TttaY@gsR4p4&}E z%pUW_w3@wnxW()k3r?{3u=}y&9O!dO5`8MH68AmUG)WleD@d(ZfCi`m+)@zb`uR{gE6;rDrg%p0Bp=@VX_ky16J=OGCL~xAW8!G4BJk)MeFS zPWv@aW*$m|L|fcpxD%&c_Z&tf>{HUuV3J0hk^tp8sZ-|XwTYZ@roh5-l+0Oi*sbJZ z3~Ad$P*?%9?c|~<4Y23{i_J;pv4vT4z*wng$nSig)uu^F13lTkG*Ds7w@6edI?aO$?yDzAN8QETv|*`2dZAAnA;T|qV)E~ScjSG4!aebwgxtj| zEI7RET3SRvIi)UQs`bH&%nj28w-L%H*2+*fW-~)c+mLafajrbRpW#L)HG;mGS#{4z zN=9o_JC?btxVa9NO{@`kWomt%6{ZJAu@z6OY9*M1`34>g4t89Y>cy!u3xcA$6n$tK{KY uRwny&~SKGOmO|M$?by7BDeDBAWF)@BbHV68# \ No newline at end of file From 685d1077e260af743fec1e4183008e7161ff2c11 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 1 Dec 2019 09:06:06 -0800 Subject: [PATCH 09/10] Bump rubyzip from 1.2.3 to 2.0.0 (#1456) Bumps [rubyzip](https://github.com/rubyzip/rubyzip) from 1.2.3 to 2.0.0. - [Release notes](https://github.com/rubyzip/rubyzip/releases) - [Changelog](https://github.com/rubyzip/rubyzip/blob/master/Changelog.md) - [Commits](https://github.com/rubyzip/rubyzip/compare/v1.2.3...v2.0.0) Signed-off-by: dependabot[bot] --- Gemfile.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile.lock b/Gemfile.lock index 05594934..a6b97838 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -219,7 +219,7 @@ GEM ruby-enum (0.7.2) i18n ruby_dep (1.5.0) - rubyzip (1.2.3) + rubyzip (2.0.0) safe_yaml (1.0.5) sass (3.7.4) sass-listen (~> 4.0.0) From 7791da0d19b845f339adf93ce25e3685d7964feb Mon Sep 17 00:00:00 2001 From: Jonah Aragon Date: Sun, 1 Dec 2019 14:36:48 -0600 Subject: [PATCH 10/10] Rearrange some sections and correct grammatical errors (#1548) Co-Authored-By: djoate <56777051+djoate@users.noreply.github.com> --- _includes/sections/android-addons.html | 10 +- _includes/sections/browser-addons.html | 36 +++--- .../sections/browser-recommendation.html | 6 +- .../sections/calendar-contacts-sync.html | 20 +-- _includes/sections/cloud-storage.html | 2 +- _includes/sections/dns.html | 81 +----------- _includes/sections/email-clients.html | 2 +- _includes/sections/email-providers.html | 10 -- _includes/sections/file-encryption.html | 4 +- _includes/sections/file-sharing.html | 2 +- _includes/sections/file-sync.html | 7 +- _includes/sections/instant-messenger.html | 115 ++++-------------- .../sections/live-operating-systems.html | 2 +- .../sections/mobile-operating-systems.html | 2 +- _includes/sections/notebooks.html | 2 +- _includes/sections/operating-systems.html | 35 ------ _includes/sections/password-managers.html | 6 - _includes/sections/search-engines.html | 4 +- .../sections/self-contained-networks.html | 6 - _includes/sections/selfhosted-cloud.html | 2 +- _includes/sections/social-networks.html | 23 +--- pages/os.html | 35 ++++++ pages/providers/dns.html | 79 ++++++++++++ pages/providers/email.html | 10 ++ pages/providers/social-networks.html | 15 +++ pages/software/networks.html | 6 + pages/software/passwords.html | 6 + pages/software/real-time-communication.html | 60 +++++++++ 28 files changed, 289 insertions(+), 299 deletions(-) diff --git a/_includes/sections/android-addons.html b/_includes/sections/android-addons.html index c44a849a..c7367f8f 100644 --- a/_includes/sections/android-addons.html +++ b/_includes/sections/android-addons.html @@ -1,9 +1,5 @@

    Android Privacy Add-ons

    - -
    @@ -12,7 +8,7 @@

    Control your traffic with NetGuard

    -

    NetGuard provides simple and advanced ways to block certain apps' access to the internet without the help of root privileges. Applications and addresses can individually be allowed or denied access to your Wi-Fi and/or mobile connection, allowing you to control which apps are able to call home or not. +

    NetGuard provides simple and advanced methods to block certain apps from accessing the internet, without requiring root privileges. Applications and addresses can be individually allowed or denied access to your Wi-Fi and/or mobile connections, allowing you to control exactly which apps are able to phone home or not.

    @@ -22,7 +18,7 @@

    Tor for Android with Orbot

    -

    Orbot is a free proxy app that empowers other apps to use the internet more securely. Orbot uses Tor to encrypt your Internet traffic and then hides it by bouncing through a series of computers around the world. Root Mode: Orbot can be configured to transparently proxy all of your Internet traffic through Tor. You can also choose which specific apps you want to use through Tor. +

    Orbot is a free proxy app that empowers other apps to use the internet more securely. Orbot uses Tor to encrypt your Internet traffic and then hides it by bouncing through a series of computers around the world. Root Mode: Orbot can be configured to transparently proxy all of your Internet traffic through Tor. You can also choose which specific apps you wish to use through Tor.

    @@ -32,6 +28,6 @@ diff --git a/_includes/sections/browser-addons.html b/_includes/sections/browser-addons.html index 023f05bf..ef18a46a 100644 --- a/_includes/sections/browser-addons.html +++ b/_includes/sections/browser-addons.html @@ -1,13 +1,13 @@

    Recommended Browser Add-ons

    - {% include sections/email-providers.html %} + +

    Related Information

    + +
      +
    • Aging 'Privacy' Law Leaves Cloud E-Mail Open to Cops - Data stored in the cloud for longer than 6 months is considered abandoned and may be accessed by intelligence agencies without + a warrant. Learning: Use an external email client like Thunderbird or Enigmail, download your emails and store them locally. Never leave them on the server.
      • +
    • With May First/Riseup Server Seizure, FBI Overreaches Yet Again
      • +
    • Autistici/Inventati server compromised - The cryptographic services offered by the Autistici/Inventati server have been compromised on 15th June 2004. It was discovered on 21st June 2005. One year + later. During an enquiry on a single mailbox, the Postal Police may have tapped for a whole year every user's private communication going through the server autistici.org/inventati.org.
      • +
    diff --git a/pages/providers/social-networks.html b/pages/providers/social-networks.html index b9ef5d77..744363c9 100644 --- a/pages/providers/social-networks.html +++ b/pages/providers/social-networks.html @@ -6,3 +6,18 @@ description: "Find a social network that doesn't pry into your data or monetize --- {% include sections/social-networks.html %} + +

    Related Information

    +
      +
    • Mastodon: Simplified Federation - Firefox Extension to improve usability for remote Mastodon instances.
      • +
    • JustDeleteMe - A directory of direct links to delete your account from web services.
      • +
    • Forget - A service that automatically deletes your old posts on Twitter and Mastodon that everyone has forgotten about.
      • +
    + +

    Facebook Related

    + diff --git a/pages/software/networks.html b/pages/software/networks.html index 882cbbb7..aa86cb7f 100644 --- a/pages/software/networks.html +++ b/pages/software/networks.html @@ -7,3 +7,9 @@ hidedesc: true --- {% include sections/self-contained-networks.html %} + +

    Related Information

    + + diff --git a/pages/software/passwords.html b/pages/software/passwords.html index eeed2e5f..8fecd68e 100644 --- a/pages/software/passwords.html +++ b/pages/software/passwords.html @@ -6,3 +6,9 @@ description: "Stay safe and secure online with an encrypted and open-source pass --- {% include sections/password-managers.html %} + +

    Related Information

    + + diff --git a/pages/software/real-time-communication.html b/pages/software/real-time-communication.html index 9a28ab8b..d027bae2 100644 --- a/pages/software/real-time-communication.html +++ b/pages/software/real-time-communication.html @@ -7,6 +7,66 @@ description: "Discover secure and private ways to communicate with others online {% include sections/instant-messenger.html %} +

    + + + + Recent news about breaking E2EE on centralized instant messengers +

    + +
    November 2019
    + + +
    October 2019
    + + +
    August 2019
    + + +
    July 2019
    + + +
    May 2019
    + + +
    January 2019
    + + +
    December 2018
    + + +

    Complete Comparison

    + + +

    Independent security audits

    + +
    {% include sections/voice-video-messenger.html %}