The ccTLDs of the EU member countries are a very good idea if you’re an EU citizen because they have built-in privacy for individuals (they don’t publish their info in WHOIS) and are also subject to GDPR.

Still overthinking, I found CZ NIC might be interesting for security, but definitely not privacy.
https://www.nic.cz/page/383/faq/

Protect your domain or contact from unsolicited changes. Block them at CZ.NIC Association and no change will be possible through the registrar. If you want to change anything first it will be necessary to unblock a domain or a contact with CZ.NIC. These blockings are confirmed by an electronic or certified signature. Nowadays it is possible to block or unblock a domain online in the Domain Browser (on www.domenovyprohlizec.cz) - this applies only for validated accounts mojeID

On that website, it also mentions possibility to use EU ID for that purpose, so I’d be fine. But it doesn’t allow hiding my address.
Indeed - “Why do you show my home address on your website? Can I disable it?”:

All personal information is automatically hidden, except for the name of the organization, the name of the individual and the postal address. It is also possible to hide the postal address information if the contact is registered to a natural person (the Organization field is not filled in) and at the same time is managed via the MOJEID service and the contact is validated.

But the requirement to validate is:

As part of improving our services, we have replaced the former validation process with a new one — linking the account with the National Point for Identification and Authentication (i.e. getting access to public administration services), which also includes identity verification.

Which is this thingy: https://portal.gov.cz/en

Finally, if trying to sign up there I get to a FAQ that states this for question if it can be used by foreigners:

Yes, you can if you have in the Czech Republic permanent or temporary residence, visa sticker, temporary international protection or granted international protection.

So it seems while I could get better security than with other registries, my home address would be made public.

But what’s the alternative besides addresses like 2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion?

The trigger is a Commission proposal to reserve some direct satellite-to-smartphone spectrum for European operators, curbing access for US and Chinese firms including SpaceX’s Starlink

“I called dibs on your RF spectrum and you’re not respecting that!”

Sorry, that seems to be a registrar, not a registry. What TLDs do you use? For example, Verisign operates .com, .net, .cc and .name.

why not host your own

I’ll first have to research how, but at no point will I consider myself as reliable as some professional provider like Cloudflare.
On the other hand, Cloudflare is kind of becoming the internet with all the centralization. Imagine if Cloudflare and AWS completely went offline at the same time. The internet would be fairly quiet.

This is good EU related info.

Wasn’t meant to be. I didn’t mention that .eu is only available for citizens, residents and companies in a European Union Member State, Iceland, Liechtenstein or Norway: https://cdn.eurid.eu/assets/terms_and_conditions-2.pdf

And history shows that (a country) exiting the EU means losing the domain name: https://eurid.eu/en/news/update-on-brexit-related-domain-names/

OK, now I am even more interested. dig doesn’t return an A record:

$ dig glauca.digital a

; <<>> DiG 9.20.27 <<>> glauca.digital a
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11516
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;glauca.digital.                        IN      A

;; AUTHORITY SECTION:
glauca.digital.         3600    IN      SOA     ns1.as207960.net. 2bd17d47fafc43aa9be298a1cdfbd0ee.dns.glauca.digital. 1791925047 86400 3600 86400 3600

Somehow, it does work in a browser. I tried different DNS servers as well (including NextDNS which I use in a browser), none returns an A record (or AAAA). So, naturally, I am curios what IP the browser uses. Since it clearly works, I tried ping just so that I could see the resulting IP, and figure out where it’s coming from.

$ ping glauca.digital
ping: glauca.digital: No address associated with hostname

Great. That makes absolutely no sense at all. Where is Firefox getting the information from?
So I went to about:networking DNS tab. The address field is empty. I am just typing this as I test. It’s just cache in my browser.

I guess that would answer on reliability question. At least their nameservers still resolve to IP.

What happens when you try?

Step 2: CNAME it to techaro.lol

Wouldn’t that just resolve to IP of techaro, thus providing a “wrong” TLS certificate?

I plan to perhaps, just maybe, I am not sure, to try self-hosting an email server. But I’ll need a good uptime.
Although I am really scared about security.

Ooooo, that looks nice.

I used to keep a charged spare on me.

There’s at least one Chinese brand that has smartphone with hot-swappable battery: https://rugone.net/products/xever-8

Removable battery. Swap within 2 minutes for zero interruption. After 2 minutes, the device enters a 60-second safety lock-out to protect your data.

Unfortunately, software from these brands tends to be shit. I feel like they just outsource it to the cheapest company. Especially following this recent thing:

As of March 4, Sophos X-Intercept telemetry listed over 500 unique compromised Android devices across nearly 50 models. The devices were mostly low-cost models produced by the following manufacturers: Allview, BLU, Dcode, DOOGEE, Gigaset, Gionee, Lava, and Ulefone. The list did not include Alldocube devices, despite Kaspersky reportedly observing Keenadu affect that manufacturer as well.

Source - Sophos
Report from Kaspersky

2nd hand mini PC running Linux?
https://plasma-bigscreen.org/ looks nice, though I haven’t used it.

Kitty mouse cursor

Since your music is already there, you can also install Termux, inside it install and configure Navidrome, and use it as a music server to stream into your computer from it.
It would also be useful for adding music since you could also install and set up an SSH server on it, and rsync files easily.

Oh, they upgraded the standard to 5 devices. I think it was just 2 in the past, which made it far more expensive than Mullvad.

Edit: One large thing missing compared to Mullvad is the proxy-based browser extension for Firefox. It let’s you select different exit server either for everything in browser, per domain, or randomize server selection per domain.

I like KDE Arianna.
Unfortunately, while in the past (I think version 24) it would show 2 columns in portrait mode, now it only shows 1 page in the middle, which I personally consider a regression.

Aside from that there’ve been some improvements. While in the past I had to flip pages by pressing arrow buttons at the bottom, it now supports swiping the pages, which is much nicer on a touchscreen.