West Asia - Communist - international politics - anti-imperialism - software development - Math, science, chemistry, history, sociology, and a lot more.

  • 7 Posts
  • 34 Comments
Joined 3 years ago
cake
Cake day: December 27th, 2021

help-circle

  • Its best to use a protocol that doesn’t allow unencrypted messages

    This is an implementation thing and not a protocol thing. What protocol doesn’t allow unencrypted messages? I am sure signal’s protocol would still allow it, it’s just that the implementation doesn’t.

    And same for XMPP. Just go with the implementation that doesn’t.














  • There are many ways to do this, but the next up from users is using groups!

    For each file or data directory, create a group that owns it. This group should have the service’s user as member. Then create a user for running the backups, and add it to all these groups.

    The benefit of this is you don’t have to use root, and you have an association of directory to group that you can always change. You can for example grant a user access to a data directory by just adding it to its group.