Hi,
I wonder what are suitable methods to protect a Lemmy instance against DDOS attacks.
For example, can we use Cloudflare? Or it could break the federation?
Any ideas/suggestions?
Anything about running your own Lemmy instance. Including how to install it, maintain and customise it.
Be sure to check out the docs: https://dev.lemmy.ml/docs/administration.html
If you have any problems, describe them here and we will try to help you fixing them.
Websites usually use transport encryption but the password itself isn’t encrypted. There are authentication schemes that won’t send plaintext passwords (by involving some kind of challenge) but they won’t work without javascript (except http digest access authentication but thats no good) and you shouldn’t ask web-developers to implement them since they will find a way to fuck it up.