The internet is owned by corporations. When I look at proposed IETF standards they are getting more and more complex to account for the whims of big businesses. The people have lost. The last vestige of a free internet is Tor.

I like to think that there is an international arrest warrant put out for the people responsible so should they try to set foot abroad they will be tried for their crimes against the environment.

See also RFC 2945 - The SRP Authentication and Key Exchange System https://tools.ietf.org/html/rf...

I fear you are correct, with a perfect storm of corporate and state interests. Anyone found with electronic devices without a sanctioned backdoor chip will be treated as a criminal.

Google provide a manager distribution of Chrome for enterprises. It is likely that there will be provision for a company to use specific DNS settings. Perhaps proxy.pac autoconfiguration might also provide some standard way to set DoH configuration for any browser too in future.

Sadly LetsEncrypt refuse to support SSL certificates for an IP address. This would have been a better way to support encrypted tls IMO (browser initiates regular TLS connection to IP address then negotiates a second TLS session to the domain name [kind of like EAP outer and inner], as opposed to the crazy dns-augmented method they decided on).

Yep eventually there will be something akin to a dnsbl but for neighborhood cctv where you can subscribe to your local shady characters list and get/share alerts when/where they are observed. Like you say, you could have it alert when someone wearing a balaclava is observed. Much easier is to have it automatically share vehicle license plates to a citizen-controlled database (blockchain? *shudder*).

Seagate Kinetic disks had this 5 years ago [1], but they stopped the project last year [2].

[1] https://www.storagereview.com/...
[2] https://www.crn.com.au/news/se...

Browsers have started to implement DNS-over-HTTPS and it's only a matter of time before Google enforces it in the future.

Feitian NFC has worked perfectly for me with my Android phone.

+1 for Feitian. One key for my phone and computer (as well as additional keys in safe places).

They recommend you backup the private key, so it cannot be considered secure like a proper u2f key.

Does it have a proper hardware key store? I would feel less safe using a key stored in memory which can be read out via software and cloned.

User accounts are not something unique to GitHub, and I would expect any service that lets you pick usernames to allow reuse, otherwise eventually you are left with random letters and numbers as users move on.

12 best practices for user account, authorization and password management
https://cloudplatform.googlebl...

I swapped the old head unit for an android one and use Here Maps. The downside is the receiver does not receive ota traffic updates using TMC or TPEG like more expensive units.