it's not the france is banning netflix for not showing films in theaters.
Yes it is. France has statutory release windows, which forbid a movie distributor that shows a movie in theaters in France from offering that movie for streaming on an all-you-can-eat video-on-demand service for 36 months after initial theatrical exhibition.
First, the user has to add the CA not only to the operating system's trust store but also the trust store of each web browser, as not all web browsers use the operating system's trust store.
Second, last I checked, it was harder to provision devices running a smartphone OS than devices running a desktop OS. Adding a certificate on Android is impossible without first setting up a PIN or pattern lock, and developers of apps made for Android 7 "Nougat" and later have to opt in to use of user-provisioned CAs through the network security config. Even if Chrome does, your favorite media playing app might not.
Third, friends or family bringing their own devices to your home in order to view the videos stored on your NAS or print to your printer might not be technical enough to complete the provisioning process on their own.
You can use several DDNS providers with letsencrypt
And there are several that you can't use because the provider hasn't completed the process to add itself to the Public Suffix List. If a DDNS provider is not on the PSL, whether by the provider's ignorance of the PSL, by the provider's choice to remain off the PSL, or by the PSL's own backlog, then all users of that provider put together are limited to 20 certificates per week, and other users are likely to have already obtained those certificates before you.
Here's directions for the one I use, duckdns.
I see that Duck DNS is on the PSL. Do you project that Duck DNS will remain in operation for the foreseeable future?
Another problem is DDNS providers that go behind a paywall. Dyn started charging for all services once it became popular, making it no better than registering a domain.
A certificate from Let's Encrypt or any other CA trusted by well-known web browsers requires a fully qualified domain name. The fee to register a domain imposes a recurring monetary cost on someone who just wants a certificate to use with a router, printer, or NAS device on a home LAN.
Is Teksavvy service worth the process of finding a Canadian employer who will sponsor an immigrant's work visa?
The only one who can answer that question for you is yourself.
I didn't want an answer for myself as much as a guesstimate at how applicable the answer is to the general public. I thought this was clear from the use of the third person "an immigrant's", but apparently it was not. So please prepend "For roughly what fraction of the population" to the question.
Way too many variables for a generalized answer.
I would have accepted an answer that briefly lists the variables that weigh most toward the decision.
Anonymous Coward and students recommended that users switch from Facebook to email. This would imply switching from Facebook groups to mailing lists, attaching any photos that they would post to the email, but leaving video unserved. You recommended Vimeo or BitChute. I glanced at both and found the following:
Vimeo appears to charge $84 per year to upload unlisted videos, or $240 per year to avoid having to spend time making your case that "you're an independent production company, artist, or non-profit [...] showcas[ing] your creative work" every time a user flags your video as prohibited "Product demos and tutorials." How many converts from Facebook to mailing lists are willing to spend that much just for the ability to post video to a mailing list?
BitChute made it difficult to find the site's guidelines. First I tried scrolling to the bottom for a footer, but this produced an unbounded scrolling list of poster images and titles instead of a footer. I eventually found the guidelines by clicking a tiny, faded greater-than sign camouflaged next to the site logo, which exposed a list of video categories, then scrolling to the end of the list. This difficult user experience didn't give me a good first impression about the rest of the site's design.
You can share files from your own NAS if you want to. And you can even build your own NAS from off the shelf hardware and FOSS software.
I can't see how to make that work for subscribers to home Internet service providers that put home subscribers behind network address translation (NAT).
I've read horror stories on the web of people being locked out of their Facebook account for refusal or inability to link an SMS number to an account.
Und why would you believe them?
Because Twitter did the same thing to me once.
The inbox can not be a timeline, as it only shows subject and sender... nothing of the contents of the mails.
You could configure your mail user agent (MUA) to show the first paragraph of each message just below the subject and sender.
If your MUA doesn't offer this sort of inline preview, you could A. request preview from your MUA's developer, B. switch to a different MUA that offers preview, or C. buy a computer whose OS supports software development, learn to program, add preview to some MUA distributed as free software, and send a patch to its maintainer.
And it only contains mails that are addressed to me or to groups I'm a member off. A timeline in FB and its clones is something completely different.
You make a good point. You'd need some sort of hybrid MUA/web browser that can integrate RSS feeds of blogs that you follow into your timeline.
Who pays in both money and time to host, maintain, and secure these?
The user always pays.
By "user", do you mean those who read a forum, those who post to a forum, or some third option that you intend to explain in your reply? If you meant the reader, then would you enjoy having to buy a $5 subscription to every site you visit? At least for me, hitting a paywall on the majority of results from a web search engine would take the enjoyment out of recreational research.
Teksavvy, one of Canada's largest independent ISPs
Is Teksavvy service worth the process of finding a Canadian employer who will sponsor an immigrant's work visa?
a significant reason being to ensure user privacy because the data is in my house
What happens to your users' data should natural disaster or violence strike your home? Is there a good way to protect it other than making an encrypted backup to a server leased from a third party and somehow backing up the backup's key elsewhere?
email is TLS opportunistically encrypted by Postfix MTA.
That will work once some counterpart to HSTS preload comes to SMTP. Until then, a man in the middle can and does strip the STARTTLS out of the SMTP traffic (source; source).
Better analogy: You probably use residential-grade locks on your house's doors because anyone who breaks your locks would in doing so show intent to commit a serious crime. This would give you, your home insurer, and your local police a strong case against a burglar. Likewise, Facebook could use its TOS as the definition of allowed access for both civil and criminal action against Cambridge Analytica pursuant to the CFAA.
Self-hosting doesn't work if your home ISP issues you a private IP address in 100.64.0.0/10, reserved by RFC 6598 for carrier-grade network address translation in countries with an underallocation of IPv4 addresses.
Even if you do have a publicly routable IP address, self-hosting doesn't work if your home ISP blocks incoming port 80 or 443.
Even if you do have a publicly routable IP address that accepts incoming connections, self-hosting is dangerous if your home ISP's acceptable use policy bans self-hosting.
Even if you do have a publicly routable IP address that accepts incoming connections and a home ISP that allows self-hosting, self-hosting still costs money for a Raspberry Pi or other server left on all the time as opposed to suspending when not in use, recurring money for a domain, and time to learn how to configure and secure said server.
My distant family, college friends and other people I like keeping up with aren't available by going outside. I can contact them individually, but I love being able to keep up with them, see what they're doing/sharing, and letting them do the same with me.
Subscribe to the blogs written by "distant family, college friends and other people" using RSS, Atom, or the IndieWeb stack's WebSub. Encourage them to subscribe to yours.
Timeline is your inbox. Grouping people into groups is making client-side in your MUA or setting up mailing lists. Photo albums is a home web server if you happen to live in an area whose ISP makes it practical.
Why not make a fake account and test it
I've read horror stories on the web of people being locked out of their Facebook account for refusal or inability to link an SMS number to an account.
Put the video up on youtube, vimeo, or one of the other similar sites, and email just a link to it?
That would not work for all videos. Even if you mark a video as private, these services still perform fingerprint-based preemptive censorship at the behest of the Music And Film Industry Associations. Besides, the list of things that YouTube's guidelines ban has become longer over the years.
Here's how it's been explained to me: Google and Facebook generally do not make a habit of selling members' personally identifying information (PII) to third parties. Instead, they safeguard members' PII and offer services, such as Google's AdWords and DoubleClick, that use members' PII and click stream as an input.
As for the Cambridge Analytica/SCL incident: Facebook sold nothing. Cambridge Analytica collected Facebook members' PII through Facebook's API and then disclosed (i.e. sold) the PII in violation of Facebook's terms of service.
Different writers use the terms "personal server" and especially "cloud" to refer to different things. Would you consider leasing a virtual private server (VPS) from a VPS provider as "personal server" or "cloud"?
For use of a home server to be practical, both a home ISP's acceptable use policy and its technical architecture have to allow it. An AUP that bans home servers is unacceptable, and inbound connections require a dedicated (even if dynamic) IP address as opposed to a carrier-grade network address translation (CGNAT) layer. Good luck moving both you and your contacts to a location where a home ISP allows the use of home servers.
Slashdot Mirror
The law may have protected release in theaters and on physical media at the same time but that does not apply to Netflix streaming either.
This citation states that the law applies to video on demand services. What citation states that it does not?
it's not the france is banning netflix for not showing films in theaters.
Yes it is. France has statutory release windows, which forbid a movie distributor that shows a movie in theaters in France from offering that movie for streaming on an all-you-can-eat video-on-demand service for 36 months after initial theatrical exhibition.
(clicks TV Tropes link)
(sees Funding Choices message wall asking me to disable the Tracking Protection security feature of Firefox)
Since when has TV Tropes become a pay site?
Alternative source for users of Firefox Tracking Protection: "Arson, Murder, and Jaywalking" on All The Tropes
Alternative source for those whose subscription package happens not to include Washington Post: "Study: Obama Had Worst Record in Supreme Court in Modern History" by Elizabeth Harrington
First, the user has to add the CA not only to the operating system's trust store but also the trust store of each web browser, as not all web browsers use the operating system's trust store.
Second, last I checked, it was harder to provision devices running a smartphone OS than devices running a desktop OS. Adding a certificate on Android is impossible without first setting up a PIN or pattern lock, and developers of apps made for Android 7 "Nougat" and later have to opt in to use of user-provisioned CAs through the network security config. Even if Chrome does, your favorite media playing app might not.
Third, friends or family bringing their own devices to your home in order to view the videos stored on your NAS or print to your printer might not be technical enough to complete the provisioning process on their own.
You can use several DDNS providers with letsencrypt
And there are several that you can't use because the provider hasn't completed the process to add itself to the Public Suffix List. If a DDNS provider is not on the PSL, whether by the provider's ignorance of the PSL, by the provider's choice to remain off the PSL, or by the PSL's own backlog, then all users of that provider put together are limited to 20 certificates per week, and other users are likely to have already obtained those certificates before you.
Here's directions for the one I use, duckdns.
I see that Duck DNS is on the PSL. Do you project that Duck DNS will remain in operation for the foreseeable future?
Another problem is DDNS providers that go behind a paywall. Dyn started charging for all services once it became popular, making it no better than registering a domain.
That said, winning the tablet market is going to require something lower than $300.
Without a keyboard, you can't accomplish a significant quantity of real work in a reasonable time
for tablets you can also buy keyboard cases that integrate cover and keyboard.
Which combination of tablet and keyboard case that totals less than $300 is any good? An iPad mini alone costs that much without a keyboard case.
A certificate from Let's Encrypt or any other CA trusted by well-known web browsers requires a fully qualified domain name. The fee to register a domain imposes a recurring monetary cost on someone who just wants a certificate to use with a router, printer, or NAS device on a home LAN.
No, it isn't. NesCartDB is on an obscure port presumably because of the block. But had BootGod been behind NAT, even that wouldn't be possible.
Is Teksavvy service worth the process of finding a Canadian employer who will sponsor an immigrant's work visa?
The only one who can answer that question for you is yourself.
I didn't want an answer for myself as much as a guesstimate at how applicable the answer is to the general public. I thought this was clear from the use of the third person "an immigrant's", but apparently it was not. So please prepend "For roughly what fraction of the population" to the question.
Way too many variables for a generalized answer.
I would have accepted an answer that briefly lists the variables that weigh most toward the decision.
It would have stopped BootGod from hosting NesCartDB had BootGod lived in a country where it was standard practice to put home users behind NAT.
Anonymous Coward and students recommended that users switch from Facebook to email. This would imply switching from Facebook groups to mailing lists, attaching any photos that they would post to the email, but leaving video unserved. You recommended Vimeo or BitChute. I glanced at both and found the following:
Vimeo appears to charge $84 per year to upload unlisted videos, or $240 per year to avoid having to spend time making your case that "you're an independent production company, artist, or non-profit [...] showcas[ing] your creative work" every time a user flags your video as prohibited "Product demos and tutorials." How many converts from Facebook to mailing lists are willing to spend that much just for the ability to post video to a mailing list?
BitChute made it difficult to find the site's guidelines. First I tried scrolling to the bottom for a footer, but this produced an unbounded scrolling list of poster images and titles instead of a footer. I eventually found the guidelines by clicking a tiny, faded greater-than sign camouflaged next to the site logo, which exposed a list of video categories, then scrolling to the end of the list. This difficult user experience didn't give me a good first impression about the rest of the site's design.
You can share files from your own NAS if you want to. And you can even build your own NAS from off the shelf hardware and FOSS software.
I can't see how to make that work for subscribers to home Internet service providers that put home subscribers behind network address translation (NAT).
I've read horror stories on the web of people being locked out of their Facebook account for refusal or inability to link an SMS number to an account.
Und why would you believe them?
Because Twitter did the same thing to me once.
The inbox can not be a timeline, as it only shows subject and sender ... nothing of the contents of the mails.
You could configure your mail user agent (MUA) to show the first paragraph of each message just below the subject and sender.
If your MUA doesn't offer this sort of inline preview, you could A. request preview from your MUA's developer, B. switch to a different MUA that offers preview, or C. buy a computer whose OS supports software development, learn to program, add preview to some MUA distributed as free software, and send a patch to its maintainer.
And it only contains mails that are addressed to me or to groups I'm a member off. A timeline in FB and its clones is something completely different.
You make a good point. You'd need some sort of hybrid MUA/web browser that can integrate RSS feeds of blogs that you follow into your timeline.
Try forums on topics on interest.
Who pays in both money and time to host, maintain, and secure these?
The user always pays.
By "user", do you mean those who read a forum, those who post to a forum, or some third option that you intend to explain in your reply? If you meant the reader, then would you enjoy having to buy a $5 subscription to every site you visit? At least for me, hitting a paywall on the majority of results from a web search engine would take the enjoyment out of recreational research.
Teksavvy, one of Canada's largest independent ISPs
Is Teksavvy service worth the process of finding a Canadian employer who will sponsor an immigrant's work visa?
a significant reason being to ensure user privacy because the data is in my house
What happens to your users' data should natural disaster or violence strike your home? Is there a good way to protect it other than making an encrypted backup to a server leased from a third party and somehow backing up the backup's key elsewhere?
email is TLS opportunistically encrypted by Postfix MTA.
That will work once some counterpart to HSTS preload comes to SMTP. Until then, a man in the middle can and does strip the STARTTLS out of the SMTP traffic (source; source).
Better analogy: You probably use residential-grade locks on your house's doors because anyone who breaks your locks would in doing so show intent to commit a serious crime. This would give you, your home insurer, and your local police a strong case against a burglar. Likewise, Facebook could use its TOS as the definition of allowed access for both civil and criminal action against Cambridge Analytica pursuant to the CFAA.
Try forums on topics on interest.
Web sites and web pages.
Create your own forum, blog and web page.
Who pays in both money and time to host, maintain, and secure these?
Self-hosting doesn't work if your home ISP issues you a private IP address in 100.64.0.0/10, reserved by RFC 6598 for carrier-grade network address translation in countries with an underallocation of IPv4 addresses.
Even if you do have a publicly routable IP address, self-hosting doesn't work if your home ISP blocks incoming port 80 or 443.
Even if you do have a publicly routable IP address that accepts incoming connections, self-hosting is dangerous if your home ISP's acceptable use policy bans self-hosting.
Even if you do have a publicly routable IP address that accepts incoming connections and a home ISP that allows self-hosting, self-hosting still costs money for a Raspberry Pi or other server left on all the time as opposed to suspending when not in use, recurring money for a domain, and time to learn how to configure and secure said server.
My distant family, college friends and other people I like keeping up with aren't available by going outside. I can contact them individually, but I love being able to keep up with them, see what they're doing/sharing, and letting them do the same with me.
Subscribe to the blogs written by "distant family, college friends and other people" using RSS, Atom, or the IndieWeb stack's WebSub. Encourage them to subscribe to yours.
Timeline is your inbox.
Grouping people into groups is making client-side in your MUA or setting up mailing lists.
Photo albums is a home web server if you happen to live in an area whose ISP makes it practical.
Why not make a fake account and test it
I've read horror stories on the web of people being locked out of their Facebook account for refusal or inability to link an SMS number to an account.
Put the video up on youtube, vimeo, or one of the other similar sites, and email just a link to it?
That would not work for all videos. Even if you mark a video as private, these services still perform fingerprint-based preemptive censorship at the behest of the Music And Film Industry Associations. Besides, the list of things that YouTube's guidelines ban has become longer over the years.
Here's how it's been explained to me: Google and Facebook generally do not make a habit of selling members' personally identifying information (PII) to third parties. Instead, they safeguard members' PII and offer services, such as Google's AdWords and DoubleClick, that use members' PII and click stream as an input.
As for the Cambridge Analytica/SCL incident: Facebook sold nothing. Cambridge Analytica collected Facebook members' PII through Facebook's API and then disclosed (i.e. sold) the PII in violation of Facebook's terms of service.
In fact, the first dozen or so twitter users all came from Slashdot.
Different writers use the terms "personal server" and especially "cloud" to refer to different things. Would you consider leasing a virtual private server (VPS) from a VPS provider as "personal server" or "cloud"?
For use of a home server to be practical, both a home ISP's acceptable use policy and its technical architecture have to allow it. An AUP that bans home servers is unacceptable, and inbound connections require a dedicated (even if dynamic) IP address as opposed to a carrier-grade network address translation (CGNAT) layer. Good luck moving both you and your contacts to a location where a home ISP allows the use of home servers.