Hello everyone,

The focused security update that I’ve been working on was pushed live on 09/08/26. You can read about it in the Chronicle—the “change-log” for the site. (NOTE: the Privacy Policy and Terms of Service have been updated to reflect these updates.)

The Quick Version (Summary):

Your security and privacy are now even more protected as well as the site itself.

The Details:

The CDN:
Everything is now loading through a Content Delivery Network (CDN), provided by Bunny.net. They are a privacy-focused CDN; delivery logs are switched off entirely on our account—unless someone tries to attack the site. Malicious behavior will set off the BunnyShield defenses, attacks will be neutralized and the offender’s IP will be logged. Normal site usage will not trigger the alarm system, your browsing stays anonymized via Plausible.

This is the cool part: the CDN means the website will load faster for anyone not in the EU since the site was migrated there. If you live in the States, the site will be served from servers in the States and if you live in Australia, the site will be served from a server in Australia.

Further, the CDN allows for DDoS and other types of attacks to be mitigated if that were to ever happen. I’m very excited about getting that setup—that was a learning curve.

Security Headers:

More so, security headers have been “installed”. This helps ensure the site can't be embedded inside another website and that when you leave the site, nobody knows that you came from it. (This can happen in website surfing for those that didn’t know.)

If you left my site to go to a religious or political site for example, they won’t know that you came from a site that contains incredibly sensitive and dark topics. I did this so that your privacy is your own.

Registrar DNSSEC:

The signposts that guide internet traffic (the DNS) now verifies that the instructions your computer receives are legitimate. This helps to stop man-in-the-middle attacks where someone could maliciously direct your request to visit the site to another site instead.

Content Consent Gate:

We’re getting fancy now! This part was pretty cool to set up. The Content Consent Gate (which I have given the name “Consent Gatekeeper”) is now a functional true lock, rather than just a passive notice. If a viewer tries to navigate to a page behind the gate without clicking "Continue" — or if their consent session expires or is reset, they’ll be redirected to the Consent page to re-verify their acknowledgment. This is an attempt to protect children and others who don’t need to be wandering around the site.

Shields Activated!:

This part is the fun update. Bunny.net’s BunnyShield is activated and now watching over the site through their CDN (which helps fight DDoS attacks), and their shield is accompanied by DreamShield which is also now activated (provided by my host—DreamHost). The primary benefit of DreamShield is that it scans the site’s files on a daily basis for any malware. Further, if the site ever utilizes a CMS (something like WordPress or other login system), it scans for weaknesses and malicious behaviors.

The Transparent Oracle:

I created a Security page, which is located next to the disclaimers (in the footer). This page gives some details about the site’s security installed and offers a “scorecard” of the site’s safety measures by using 3rd party audit tools. I’ve provided the links directly on that page so that you can verify their audit scores yourself—you don’t have to place blind trust in me.

The Honest Assessment—It’s Overkill:

For this site, which has a low threat model anyway, this focused Security Update is a bit over-the-top and most likely unnecessary (I hope). My thoughts are though that as the site grows, malicious actors and trolls may think it’s “fun” to try to attack this type of site and by putting these measures in place, the site will be able to ward off attackers. This is obviously good for me, but also if there are viewers that are in vulnerable states, they don’t need to deal with that. You dear reader, are worth it, so the shields are up. :-)

In Closing:

There are some more security elements, but no sense in spending all the time talking about it here.

If you visit the site, your space is protected. That was the goal.

Though these updates are technically “invisible” to the viewer, it lays a secure foundation for me to continue building on. The next update is going to be a visual overhaul / upgrade, and I can’t wait to show you.

You are safe, you are worthy.

Regards,

GhostAgent