Ntfy.sh – Send push notifications to your phone via PUT/POST

Post by conductr » Tue, Nov 08, 2022, 7:31 PM UTC

binwiederhier wrote: post #125

timtom39 wrote: post #120

Earlier quoted context omitted.

Just gave the developer $50 so he doesn't need to reduce monthly costs. I like the service running well.

Much appreciated my friend. I honestly didn't opt for the cheapest server because I wanted it to run well. I don't want to constantly fight for resources or worry about it. It was supposed to be fast and be able to handle traffic well. And it is. It's not falling apart from the HN traffic and it has a lot of head room. Plus. It's doing 400k messages a day already easily. Anyway. Thank you so much for your generosity.…

Post by hamburglar » Tue, Nov 08, 2022, 7:36 PM UTC

krn wrote: post #218

hamburglar wrote: post #203

Earlier quoted context omitted.

> My point is very clear and simple: all private communication on the internet should be E2E encrypted by default, unless there is a good reason not to. Are you counting HTTPS as “E2E encrypted”? Because if not, consider that we do private communication over mere HTTPS all day long. Me loading the HN web page and having my own personal rendering of it with my user cookie header and all my upvote/downvote/karma/profil…

> Are you counting HTTPS as “E2E encrypted”? No. > Because if not, consider that we do private communication over mere HTTPS all day long. Me loading the HN web page and having my own personal rendering of it with my user cookie header and all my upvote/downvote/karma/profile state is private communication, for example. Because there is a good reason for it: it wouldn't work well with E2E encryption.

Post by binwiederhier » Tue, Nov 08, 2022, 7:57 PM UTC

otoolep wrote: post #211

binwiederhier wrote: post #207

Earlier quoted context omitted.

https://ntfy.sh/docs/faq/#what-are-the-uptime-guarantees I guarantee for nothing, since this is a spare time project. That said, I have had zero outages in 11 months, see https://ntfy.statuspage.io/ When it outgrows the single EC2 instance, I'll likely start building some distributed thingy to spread the load and do some HA things (sounds like fun). Probably just a load balancer and 2-3 instances with a rqlite backen…

rqlite[1] author here, happy to answer any questions about it if it helps. rqlite will give you HA, but won't help with load (rqlite replicates for reliability, not for write performance). But I like to think the it'll give you solid -- and simple to use -- HA. Replicated just replaced their use of Postgres with rqlite for this reason[2]. [1] https://github.com/rqlite/rqlite [2] https://www.replicated.com/blog/app-ma…

Post by krn » Tue, Nov 08, 2022, 8:10 PM UTC

hamburglar wrote: post #223

krn wrote: post #218

Earlier quoted context omitted.

> Are you counting HTTPS as “E2E encrypted”? No. > Because if not, consider that we do private communication over mere HTTPS all day long. Me loading the HN web page and having my own personal rendering of it with my user cookie header and all my upvote/downvote/karma/profile state is private communication, for example. Because there is a good reason for it: it wouldn't work well with E2E encryption.

Well, ok, I guess we can use that as a justification for anything then. For example, the “good reason not to” use E2E for ntfy could be “market analysis says the small and somewhat theoretical benefit isn’t worth the complexity.”

Post by phaer » Tue, Nov 08, 2022, 8:17 PM UTC

pastage wrote: post #132

phaer wrote: post #101

Earlier quoted context omitted.

Especially with things like notifications, even e2e encryption can't generally provide complete privacy because metadata is data too ;)

You solve that by forwarding/decrypting/adding noise between servers, enough to cover metadata traffic you generate. The only data you reveal is anyone listening know you might have used it at some point. See https://vuvuzela.io/ I suspect it is named so because it uses a lot of bandwidth.