[ale] Best Self-Hosted Cloud Solutions

[DJ-Pfulio]

On 07/10/2015 01:38 PM, Chuck Peters wrote:
> DJ-Pfulio said:
>> On 07/10/2015 11:11 AM, Vernard Martin wrote:
>>> What solutions do YOU use and how much difficulty have you had hosting it?
>>
>> sftp and rsync.
>> Cannot imagine needing anything more.
> 
> I can, haven't you heard about some of the things we have learned in the 
> post Snowden era...

Specifics please.  I can control the PKI for ssh connections and I can connect
directly to an IP, no DNS needed.

>> If you do go with any "cloud" offer, please, please, please, use a full IPSec
>> VPN. HTTPS is **not** secure.
> 
> Would you please explain why you think VPN's are secure and https is not?

Never trust DNS, which is what HTTPS certs are based on.

> According to what I have read, both VPN's and https have issues, but it 
> isn't a simple as declaring one thing or another is insecure.

True - VPNs that are not based on IPSec have had more security issues. That's
all.  I cannot believe that people still use PPTP, for example.

> https://jdpfu.com/ shows your Zimbra login page with an invalid  ...

There are reasons for some settings that I won't go into here.