Skip to content

Latest commit

 

History

History
49 lines (31 loc) · 2.12 KB

approach.md

File metadata and controls

49 lines (31 loc) · 2.12 KB
Raw

Privacy

This is my approach to protecting my privacy online.

Guiding Principles

  • Provide privacy protection to all devices.
  • Limit the dependency on external systems that we have no control over.
  • Limit the amount of device specific configuration required.
  • Limit the amount of low level device configuration and maintenance required.
  • Maximise automation to keep privacy protection up to date.
  • Avoid using browser extensions that can access all web content and history.

Three Tier Approach

  • DNS Level
    • Preventing privacy eroding requests from being able to be resolved on any device you use.
  • Operating System Level
    • Preventing privacy eroding requests being made from the device operating system itself ever leaving the machine.
  • Browser Level
    • Clean up anything left over from the DNS and Operating System level that effect the browsing experience such us:
      • Removing empty spaces where ads would have shown
      • Prevent GDPR prompts from displaying

DNS LEVEL

Use nextdns.io to replace DNS lookups for all devices. In my own setup:

  • Runs on my MacBook using the Mac app
  • Runs on my iPhone using the iOS app
  • Runs on my home network at the router level, using ipV6 DNS replacement directly in the router firmware.

Operating System Level

Use Little Snitch on MacOS in order to provide request blocking at the operating system level. This is handy because sometimes in my line of work I need to use a VPN, which bypasses the use of Next DNS.

Using Little Snitch rule set subscriptions, I can have as close to exact blocking as I get from Next DNS, without having to worry about losing it when I activate the VPN.

Most protection from Little Snitch comes from rule subscriptions that target all processes.

I also check periodically individual apps, to see what they've been accessing, and deny certain domains per app as required.

Browser Level

Resources

el1t/uBlock-Safari#158