posted it. Got dunked on for AI slop

101 upvotes and 14 downvotes… dunked?

Anyway, I stopped reading and downvoted after the

Ipso facto, for all the AI “Akshually” pedants, I’ve tagged this as AIP. Politely go fuck yourselves :)

typing the word “politely” or a smiley doesn’t make a very rude remark any less rude.

Moreover, splitting the community into a pro-AI faction and an anti-AI one isn’t healthy (for the community, whether it’s healthy for you is a can of worms that I don’t want to open right here and now) and ridiculing the other “faction” can only radicalize things and we already have more than enough of that, both in lemmy and, sadly, also IRL.

So, personally, I donwvoted your post, not your project.

What risk are you trying to mitigate, specifically?

If it’s the CA taking over your site, control over your CA specifically doesn’t really give any advantage to an attacker (they would have to hijack traffic and provide a new certificate - nobody will notice if the certificate is from a different CA).

Note that your CA cannot decrypt the exchanges between your server and its clients.

Didn’t read the article but I love the braindead chart:

Wow. Do they block VPNs inside your country too?

Anyway, there’s openvpn and there’s nebula (I think nebula doesn’t use wireguard… do double-check), or you look into things built specifically to hide traffic (keyword: “vpn obfuscation”).

No idea if VPN protocols other than wireguard may be blocked too (probably?).
No idea if trying too hard to circumvent government policies may get you added to some list you’d rather not be in.