nadeko.net takes the security and performance of the connection kinda seriously, so here, I (Fijxu) will share what I have done to make the services secure and fast.
First things first, ECH, all services have ECH enabled, making
anyone on the middle of your network (Public Wi-fi, Firewall or
ISP), unable to get to which domain you are trying to connect, in
this case, nadeko.net, anyone in the middle of your
connection will not see that you are connecting to domain nadeko.net, but that doesn't mean that they can't map
the current ECH domain to nadeko.net, so is not
completely bulletproof, but still an annoyance for anyone in the
middle of the connection that wants to know to which domains you are
connecting to.
In order to make ECH to work for you, you will need to install a compatible browser that supports ECH and also use a compatible DNS server, preferably a DNS-over-HTTPS one. In the internet you can find guides on how to enable a DNS-over-HTTPS for your OS or Browser, although you can also use a DNS-over-TLS or DNS-over-QUIC server, they are all encrypted and no one in the middle will be able to see your DNS queries! I personally recommend NextDNS or ControlD Free DNS servers, but you are free to pick any other DNS server that you want.
Anyways, you can learn more about ECH here: Cloudflare Blog: Encrypted Client Hello - the last puzzle piece to privacy
nadeko.net uses post-quantum cryptography, which
is supposed to prevent quantum computers of the future from
deciphering your traffic
to nadeko.net, probably preventing
Harvest Now, Decrypt Later
attacks. Why I say supposed and probably? Well, because we still
don't have quantum computers that can break RSA-2048 or RSA-4096, so
post-quantum cryptography is here to prevent your current traffic to
be deciphered by quantum computers of the future. You can find more
information about post-quantum cryptography here:
Cloudflare Blog: State of the post-quantum Internet in 2025
.
You can also test if your browser supports Post-Quantum Cryptography here:
nadeko.net uses strong SSL ciphers to make sure your
connection, they go in this order and your device will choose the
one that is secure and fastest is secure. The most common used ones
are this two: TLS-AES256-GCM-SHA384, which is used for
desktop devices with AES-NI hardware acceleration (mostly computers)
and TLS-CHACHA20-POLY1305-SHA256, which is mostly used
for mobile devices without AES-NI hardware acceleration, but they
are both secure!
All services have HTTP/2 and HTTP/3 support, HTTP/2 is pretty common
and mostly enabled on most websites, but HTTP/3 is still pretty
uncommon, at least for small websites, since it requires a little
bit more of configuration, but nadeko.net has HTTP/3
enabled on all services, so if your browser supports HTTP/3, you
will take advantage of that!
nadeko.net makes backups of all the important user data pretty much every day or week, depends of the type of data, but if something goes wrong, nadeko.net will always have a backup!
All services are updated automatically and regularly (for some services that does not have automatic updates). I would like to have updates announcements but honestly, I host too many services, and announcing that the services have been updated, would be tiresome and too much work.
