Forem: Christian Ahrweiler

Secure DNS Is Good. But Location Still Matters

Christian Ahrweiler — Tue, 05 May 2026 18:20:23 +0000

Every time you open a website, your device asks a DNS resolver where to find it. It’s a small, invisible step — but one that happens constantly. Over time, these requests create a detailed picture of your online activity.

Encrypted DNS, like DNS over HTTPS or TLS, protects these requests in transit. Your ISP can’t see them anymore, and neither can someone on public Wi-Fi.

That’s a real improvement. But it’s not the full story.

Encryption doesn’t remove visibility — it shifts it. Instead of your ISP, a DNS provider now sees all your queries in one place.

And where that provider operates matters more than most people think.

Secure DNS protects your traffic.
Secure jurisdiction protects your data.

There’s a growing shift, especially in Europe, toward keeping data within regional boundaries. Users and companies are paying more attention not just to how data is encrypted, but under which legal framework it exists.
Become a Medium member

DNS is part of that shift.

Many widely used DNS services are run by US-based companies. Even when they offer European endpoints, the service itself is still governed outside the EU.

So while your traffic may be encrypted, control over that data often isn’t local.

This is why more people are starting to look beyond features and toward alignment — technically and legally.

Encryption matters.
But so does jurisdiction.

At FoxyDNS, the goal is to combine both.

FoxyDNS operates globally, while allowing users to explicitly choose EU-based DNS endpoints — keeping queries within European infrastructure and under EU data protection standards.

https://foxydns.com/

Encryption is a step forward.

But where your data ends up — and who is responsible for it — is what actually defines privacy.

Why Secure DNS Matters — And Why EU-Based DNS Is Gaining Attention

Christian Ahrweiler — Fri, 01 May 2026 09:04:06 +0000

Most people never think about DNS.

Yet every time you open a website, send a message, or launch an app, your device makes a DNS request — essentially asking:
“Where is this server located?”

By default, these requests are often unencrypted.

That means:

Your ISP can see every domain you look up
Networks (Wi-Fi, corporate, public hotspots) can monitor or manipulate requests
DNS queries can be intercepted or tampered with

The Problem with Traditional DNS

Classic DNS was never designed with privacy in mind.

Requests are sent in plain text, which makes them:

Easy to log
Easy to inspect
Easy to redirect

Even if the website itself uses HTTPS, the DNS lookup still leaks metadata about what you’re accessing.
The Shift to Encrypted DNS (DoH)

Modern solutions use DNS over HTTPS (DoH).

Instead of sending DNS queries openly, they are:

Encrypted
Sent over HTTPS
Protected from interception and manipulation

This brings DNS in line with the rest of today’s secure web.
But There’s a Second Question: Where Does Your DNS Go?

Most people stop at encryption.

But there’s another important aspect:

👉 Where are your DNS queries actually processed?

Popular providers often route traffic globally — sometimes outside your region or legal jurisdiction.

For some users, that’s fine.
Become a Medium member

For others, it raises concerns around:

Data sovereignty
Regional regulations (e.g. GDPR)
Trust in infrastructure location

Introducing Regional Control: EU-Only DNS

A growing number of users are now looking for regional control, not just encryption.

This is where EU-only DNS routing comes in.

With this approach:

DNS queries are encrypted
AND restricted to European infrastructure only

This means:

No global routing outside the EU
Predictable jurisdiction
Reduced exposure to foreign infrastructure

A Practical Example

With FoxyDNS, you can choose how your DNS is handled:

🌍 Use the global network for best performance worldwide
🇪🇺 Enable EU-only mode to keep DNS resolution within Europe

Both options use encrypted DNS (DoH), but give you control over where your queries go.
Why This Matters More Now

There’s a noticeable shift in user expectations:

More awareness of data flows
More concern about jurisdiction
More demand for transparent infrastructure

Encryption is no longer enough on its own.

👉 Control + transparency are becoming just as important
Try It Yourself

If you want to see how encrypted DNS with regional control works in practice:

👉 https://foxydns.com

I Built a Mac App That Turns Any FTP Server Into a Native macOS Drive

Christian Ahrweiler — Sat, 28 Feb 2026 16:19:06 +0000

I built myCloudDrive — a macOS menu bar app that connects to your own server via SFTP, FTPS, or WebDAV and mounts it as a real drive in Finder. No cloud provider, no subscription, no middleman. Your files stay on your server.  The Problem

I have files on my VPS. I have files on shared hosting. I have files on a NAS. Every time I need something, it's the same dance: open Transmit or Cyberduck, connect, navigate, download, edit, re-upload.

What I actually wanted was simple: my server showing up in Finder like a USB drive.

macOS has had "Connect to Server" for years, but it's flaky, disconnects randomly, and doesn't handle FTPS at all. Third-party mount tools exist but most are slow network filesystems that choke on large files.
I wanted something different: a local drive that syncs — fast local reads, background sync to the server, works offline.  The Architecture

myCloudDrive runs as a menu bar app and does three things:

Creates a sparse disk image and mounts it at /Volumes/myCloudDrive — it shows up in Finder's sidebar under Locations, just like an external drive
Syncs bidirectionally with your server using a three-way merge algorithm (local state vs. remote state vs. journal of last known sync)
Watches for changes via FSEvents and syncs automatically within seconds

The sync engine supports three protocols:

SFTP (SSH) — via libssh2
FTPS (FTP over TLS) — via curl
WebDAV (HTTP/HTTPS) — via URLSession

Why Not the Mac App Store?

I tried. The app's architecture is fundamentally incompatible with the MAS sandbox:

hdiutil (creates the disk image) — sandboxed apps can't execute system binaries
/usr/bin/curl (FTPS) — same restriction
FSEventStream on /Volumes/ — sandboxed apps can't watch paths outside their container

I also attempted Apple's File Provider extension (the "proper" way to add virtual filesystems on macOS). After weeks of fighting its poorly documented, buggy API, I abandoned it. The sparse disk image approach just works.

myCloudDrive is notarized by Apple and distributed directly from myclouddrive.app. No Gatekeeper warnings, no sketchy unsigned binary. Many great Mac apps ship this way — Transmit itself left the MAS years ago.

Privacy by Architecture

This isn't a feature toggle. It's how the app is built:

No account creation. You enter your server credentials, that's it.
No cloud relay. The app connects directly to your server. Traffic never touches a third-party service.
No analytics, no tracking, no telemetry. Zero outbound connections except to your own server.
Your files never leave your infrastructure.

Try It

myclouddrive.app — $24.99, one-time purchase, no subscription.
Works with any SFTP, FTPS, or WebDAV server.
Your VPS, your NAS, your shared hosting. Your files, your drive.

Introducing myCloudDrive — Turn Any FTP Account Into a Native macOS Drive

Christian Ahrweiler — Wed, 25 Feb 2026 11:18:19 +0000

myCloudDrive is a macOS app that turns any FTPS or SFTP account into a native drive in Finder. Your server appears like an external disk, ready for drag-and-drop access.

Whether it’s web hosting, a VPS, a NAS, or client infrastructure — if it supports secure FTP, it works. Your files stay exactly where they are. myCloudDrive simply connects your Mac directly to your existing storage, giving you full control without vendor lock-in or subscriptions.

Your storage. Your server. Native on macOS.

https://myclouddrive.app/

🚀 ATECmap — Cookie-Free, Privacy-First Web Maps

Christian Ahrweiler — Tue, 06 Jan 2026 16:13:37 +0000

Embedding maps on your site often means loading trackers, cookies, and third-party scripts — which can slow pages and trigger GDPR consent banners. What if you could embed a map

❌ No cookies, no tracking, no logging — ever.
🔐 GDPR / DSGVO compliant by design — no consent banner required.
⚙️ Provides map data you can embed anywhere or use via API.
🧭 Supports custom map icons and locations.

For devs, this means you can add rich location features to your site without worrying about intrusive trackers or slowing down performance.

🧠 Why This Matters

Most embedded maps pull from major providers but often at the cost of user privacy (tracking pixels, cookies, etc.). With ATECmap, all the map tiles and interactions are served without third-party tracking, keeping you and your users compliant without annoying consent UIs.

It’s especially helpful for:

Websites that must stay clean and compliant (GDPR focus)
Projects where user privacy and minimal footprint are priorities
Devs who want an alternative to big map providers without trade-offs

https://atecmap.com

🚀 ZeroConsent (ZCA) — Ditch the Cookie Banner, Keep the Trust

Christian Ahrweiler — Tue, 06 Jan 2026 15:09:50 +0000

Almost every site in the EU feels forced into the “cookie banner” treadmill — blocking content until a user clicks a confusing choice, or polluting analytics with consent noise. But what if you didn’t need a banner at all? 💭

Introducing Zero-Consent Architecture (ZCA) — a new compliance approach and certification offered at zeroconsent.eu that helps you build privacy-first sites that don’t set non-essential trackers before consent. The result: no cookie banner, faster pages, and provable privacy by design.

https://zeroconsent.eu

🧠 What ZCA Is

Zero-Consent Architecture is about:

❌ No non-essential cookies or identifiers before consent
🔒 No tracking, fingerprinting, or pop-ups by default
📜 A public ZCA Certificate you can link on your site
⚡ Better UX and performance — fewer banners, fewer blockers
✅ Compliance based on what actually happens on your domain

Instead of layering a consent banner over existing trackers, ZCA flips it: if you aren’t setting anything that requires consent, you don’t interrupt users. You prove it.

📈 Why This Matters

Under GDPR and related EU rules, tracking cookies and identifiers generally require freely given, informed, specific consent before they’re set. Banners became the default workaround — but they often annoy users, slow sites, and create legal ambiguity.

Zero-Consent Architecture takes a different path: compliance by design, not by overlay. That reduces legal surface area and improves speed and trust — no modal, no nag screen, and no “consent fatigue.”

https://zeroconsent.eu

🚀 WP Mega Cache — Supercharge Your WordPress Performance

Christian Ahrweiler — Tue, 06 Jan 2026 15:06:42 +0000

Slow page loads are one of the biggest pains for WordPress sites — they hurt SEO, increase bounce rates, and frustrate users. Caching plugins solve this by serving static versions of pages instead of rebuilding every request. That drastically reduces load time and server resource usage.

Today I’m excited to share WP Mega Cache — a fast, flexible page cache plugin designed to get WordPress sites super responsive with minimal configuration.

https://wpmegacache.com

⚡ What WP Mega Cache Does

🔁 Extremely low response times — caching can drop processing from ~130 ms to ~0.25 ms in real cases.
🧠 8 storage backends — APCu, Redis, Memcached, Disk, MariaDB, MySQL and more.
🛍 WooCommerce support & custom post types ⚡
☁️ CDN integrations (Cloudflare, Bunny.net) for global delivery.
🗣 Multilingual support (Polylang, WPML, TranslatePress).
🧹 HTML minify, cache priming, and more performance tweaks.
📦 Free basic version + optional one-time Pro license (no subs).

🧠 Why This Matters

A good cache plugin doesn’t just store files — it improves server speed, reduces CPU and memory usage, and delivers content faster for your visitors. That’s crucial for SEO, Core Web Vitals, and overall UX.

WP Mega Cache focuses on real performance, with advanced storage options and simple setup — even on shared hosting.

https://wpmegacache.com

🚀 EMDR.chat — Secure Teletherapy with Integrated EMDR Stimulation

Christian Ahrweiler — Tue, 06 Jan 2026 15:04:01 +0000

EMDR (Eye Movement Desensitization and Reprocessing) is a structured psychotherapy technique used to help clients process and heal from traumatic memories and emotional distress. It involves bilateral stimulation (like guided eye movements or visuals) while working through trauma with a trained therapist.

Today I’m excited to share EMDR.chat — a teletherapy platform designed specifically for secure, reliable EMDR sessions online. https://emdr.chat

🧠 What It Is

EMDR.chat is a peer-to-peer video conferencing tool tailored for EMDR therapists and clients:

🔒 Secure, GDPR-compliant video calls
🎯 Built-in EMDR visual stimulation tools — no external devices needed
🌐 Works across browsers & OS (Chrome, Edge, Safari, Firefox, macOS, Windows, Linux)
📅 Session scheduling & reusable session credentials
⚡ Reliable P2P with relay fallback for connection stability
💼 Designed for therapists — secure and private by default

It removes the need for separate video tools + physical EMDR devices and lets clinicians focus on the therapy.

🤝 Why this matters

Virtual therapy has become an important part of accessible mental health care — and EMDR sessions are no exception. Online tools that support real EMDR workflows (including bilateral stimulation) help clinicians meet clients where they are without sacrificing safety or experience.

EMDR itself is widely used and studied as a method to help people reduce distress related to traumatic memories and associated symptoms.

👉 Check it out
👉 https://emdr.chat/

🚀 Beaver Tools — Tiny macOS Utilities That Just Work

Christian Ahrweiler — Tue, 06 Jan 2026 15:00:40 +0000

I’m excited to share Beaver Tools — a suite of small, focused macOS utilities built for everyday workflow tasks you’d actually use. They’re designed to be fast, native, and unobtrusive — no subs, no clutter, no trackers.
Beaver Tools

🧰 What It Is

Beaver Tools is a growing collection of tiny macOS apps that solve common productivity problems without getting in your way. With a simple drag-and-drop or click:

📦 Extract archives (ZIP, 7Z, RAR, ZST, or all in one)
🖼 Convert and optimize images (AVIF, WebP, HEIC)
🗑 Clean up leftover app files with App Remover
🎨 Capture colors with Color Picker Pro
🪄 Remove metadata or backgrounds from images & PDFs
🎛 Convert video to GIF or audio — and more

Everything runs locally on your Mac — files aren’t uploaded anywhere.

📦 What Makes It Different

Native macOS experience (no weird installers)
Zero tracking or data collection
Simple pricing (mostly one-time App Store purchases)
Tools you can drop into your daily workflow without thinking

👉 Check it out: https://beavertools.app/

Would love to hear what tools you wish existed on macOS — happy to discuss ideas or hear how you use Beaver Tools in your own workflow! 😊

🚀 fastTURN — Fast, Global STUN & TURN for WebRTC & SIP Apps

Christian Ahrweiler — Tue, 06 Jan 2026 14:57:52 +0000

Real-time communication (WebRTC, SIP, video calls, chat apps, apps with peer-to-peer connections) often needs more than just signaling — it needs reliable STUN/TURN servers to get traffic through NATs and firewalls.
WebRTC

I’m excited to share fastTURN — a professional, globally distributed STUN & TURN service built for speed, reliability, and simplicity.

🚦 Why fastTURN

🌍 Global network with 24+ locations — auto-routes users to the closest server
⚡ Optimized for super fast handshakes (STUN resolution avg ~49 ms)
🔒 Secure connections with SSL support (optional)
📈 Reliable uptime & bandwidth — 99.99% availability
💸 Affordable plans + a free tier for testing/dev
🔁 Works with SIP, ICE, WebRTC apps out of the box

Whether you’re building video chat, VoIP, or any peer-to-peer app, this gives you the fallback connectivity infrastructure you need without hosting your own TURN servers.

👉 Check it out: https://fastturn.net/

Would love to hear:

What real-time stack you’re using
How you handle TURN/STUN now
Pain points you’ve run into in production

Happy to answer questions! 🚀

Introducing atec Plugins — A Introducing atec Plugins — High-Performance, Handcrafted WordPress Plugin Suite

Christian Ahrweiler — Tue, 06 Jan 2026 13:53:08 +0000

WordPress plugins are how you extend your site’s functionality — from caching and SEO to backups and custom tools.

I’ve been working on a set of WP plugins under atec Plugins that are built for speed, efficiency, and real-world use. All are handcrafted and optimized for minimal CPU footprint so they’re fast and lightweight even when combined.
https://atecplugins.com

What It Is

atec Plugins is:

🧰 A comprehensive suite of WordPress plugins
⚡ Optimized for size, speed & memory — average CPU footprint under 1 ms
🛠️ Built on a shared “atec-WP-plugin” framework to reduce bloat
🧩 Fully multisite compatible and tested on Linux, Windows & macOS
📦 Easy install via a free 1-Click-Install manager
💡 Free basics + optional Pro lifetime license for advanced features

No subscription required

What You Get

A mix of essential, performance, security, and tools plugins, including (among others):
atecplugins.com

CACHE-APCU & CACHE-INFO — effective object & page caching
Backup & Database tools
SMTP-Mail with DKIM support
System-Info & Debug tools
Anti-spam & Limit-Login security helpers
Redirect manager, 404 tracker, SVG support
CDN integrations (BunnyCDN, FoxyFy)
Maintenance and admin helpers …and a Pro package with 50+ valuable plugins at a one-time price.

Why It Matters

There’s a huge ecosystem of WordPress plugins, but many can be bloated, inefficient, or poorly maintained.
WordPress.org

atec Plugins aims for reliability, performance, and developer-friendly design — the stuff you actually want on production sites without the overhead.
https://atecplugins.com

I’m iterating, improving compatibility, and adding new tools — so if you’re building or optimizing WordPress sites, give it a spin and tell me what you think. Built in the spirit of the

I’m Sharing ATEC Systems — Our Software & Web Services + Dev Tools

Christian Ahrweiler — Tue, 06 Jan 2026 13:21:37 +0000

Over the past while I’ve been building and expanding a suite of tools and services under ATEC Systems — a software design and development company focused on modern web and app solutions.

We build custom software, websites, web apps, and native apps — but we also publish helpful tools that you can use today.
atec-systems.com

What ATEC Systems Does

At its core, ATEC Systems is about creating tailored digital solutions:

🧠 Custom Software — built to your needs and designed to evolve with your business.
🌐 Websites & Web Apps — from WordPress to fully custom builds powered by modern frameworks.
📱 Mobile/Desktop Apps — native and standalone apps for Android, iOS, and macOS.

Everything is crafted with performance, usability, and scalability in mind.

Besides client projects, we maintain a set of developer-centric services:

🛠 Network & Infrastructure tools like servers, CDN, DNS, and routing utilities.
🗺️ GDPR-compliant maps without tracking.
📸 Screenshot/image sharing by link.
💬 WebRTC & video communication helpers.
🔁 Fast TURN services for SIP, ICE & RTC workflows.

These are available to use or integrate into your workflow without heavy setup.

Why This Matters

I’ve been in the trenches solving real problems for clients — performance, security, maintainability, UX — and a lot of the tools we’ve built help us day to day. I figured they’d help others too.

Whether you need a fast micro-utility or a full custom build, we’re exploring practical, developer-friendly ways to ship better software.

Try It & Share Feedback

👉 https://atec-systems.com/

If something doesn’t quite fit your workflow yet, or you have ideas for improvement — I’d love to hear them. Built in the spirit of DEV Community 💡