POLL: Regarding self-hosting vs use of external services:
- I prefer one external service only, such as the Proton ecosystem.
- I only use external services (no self-hosting) but like to use several different services.
- I use a hybrid approach with some external services and some self-hosting.
- I only self-host.
Hi,
I’m reassessing what to self-host and what external services to use. I’ve been running LAN-only Nextcloud for a while but could enjoy spending less time on maintaining this and other in-home services even though I’ve learned a lot. Have used Proton for email-only for a few yrs, and like it ok, so am tempted to move more to the Proton ecosystem, especially given the Black Friday deal which I’d use to up my plan. A move to an “ecosystem” would probably make my Apple-using significant other happy.
I reviewed some threads on PG ( 1, 2, 3, 4, 5, 6) and then thought a poll might be interesting for the community. My brief notes on those threads follow the poll.
(If not clear, “external services” means services like: Proton, Tuta, Mailbox.org, clouds, Cryptpad, Ente Photos, etc).
Notes from above threads:
Having more than one service can be good.
Self-hosting on your own hardware is better than on a VPS (due to being reliant on a provider who may be able to access your data).
Self-hosting can require a lot of work (for reliability).
Using an E2EE service can offload the burden of setup and maintenance to professional teams.
Will the E2EE service you choose not become evil?
If using an E2EE service, you need to know how to back out of it.
Separate your password manager from 2FA service/app.
Self-host as much as possible rather than shifting trust to providers.
If you need to share things with other people, an E2EE service may be easier.
Using different services can lead to duplication of effort.
Proton is trustworthy enough for the average person w/o a high threat model
If high treat model, diversification may be more important.
Having everything in one big basket can be a single point of failure.
Proton makes exporting easy.
Might make this choice based on app function, ie - want to use Fossify Calendar so use caldav self-hosted, or can’t use the E2EE service app in off-line mode.
Avoid self-hosting services that are harder, ie - email.
Have some things in an E2EE service and some things local (more personal data).
Self-hosting can save money but take up more time.
If self-hosting, start on lower-risk tools first.
Data that cannot be lost may be best not self-hosted if you don’t know what you are doing.
Self-hosting can be a fun hobby in which much is learned.
Some avoid some companies for personal moral reasons.
With an E2EE service you must trust the Admins to not be evil (“keys to the castle” dilemma); must rely on the presence of open code repos, audits and after the fact reporting for trust.
E2EE services may ping home a lot.
Some E2EE services have a good track record.
There may be concern RE how encryption keys are generated, - ie is it verifiable they are only kept on the client?