Cops confiscate devices all the time without good reason lmao. It's commonplace to seize devices on a person upon arrest. Judges also grant search warrants upon very little evidence too. Cops absolutely don't need to "prove" anything to a judge to get a warrant; there is no standard of proof at all; it's a standard of evidence, which is not the same thing as proof, and a low standard of evidence at that.

Or use nadeko's onion service

You're right in pointing out the problems with decentralized message synchronization, though I was only trying to point out the fact that no known technology is capable of real-time messaging unless both parties are online

Try FairEmail. It's the closest thing I've found. https://f-droid.org/packages/eu.faircode.email/

Apparently this is a tough problem for mobile devices... GrapheneOS (security hardened OS based on Android) took months to fix a leak someone reported, and had to collaborate with the VPN app providers to do it https://github.com/GrapheneOS/os-issue-tracker/issues/3442

It's the entire fucking point.

The explanation is that they will just use this shit to target whomever they please regardless of reason. This is how fascism works. It is meant to be confusing. Stop trying to rationalize it, you're wasting energy.

They didn't really ask about a proxy server, I just gave them one thing a VPN could do

Have you used these routers? Was literally looking at them this morning

You're system sounds well thought out and more than secure enough for most people's needs, so if that is what works for you I would go for it. I also like the fun idea for the duress passphrase, I just hope a friend doesn't get tempted to try and unlock your phone and accidentally wipe everything! Overall, the only comments I would make are: be wary of using biometrics for ring 0, in countries like the US the cops can force you to use your biometrics, by law. GrapheneOS does have ways to quickly disable biometric unlock in emergencies, or automatically disable it after a set period of time you are using both a security key and a passphrase for securing the ring 0 database. Perhaps commit to one of them, to reduce complexity. The more complicated the system, the more places there can be vulnerabilities getting access into the ring 0 device is effectively compromising the database, even if you have a password on the database. There are numerous things that an attacker can do once in control of the device, like enabling internet, flash a custom rom and copy all the files over to make it look identical, installing a keylogger, changing the UI to hide any modifications, etc. This is also why I try to use my ring 0 device as little as possible, every time I enter the password is another chance for the password to be stolen putting your Aegis TOTP app on ring 0 means you have to constantly use your ring 0 device. I prefer to use my ring 0 device as little as possible, both for security and convenience. My TOTP app is on a ring 1 device instead, and is only used to secure online accounts (which I consider ring 2). If you want to use 2FA for ring 1 then I suppose you are forced to put your TOTP app on ring 0, though I find the inconvenience not worth it.

thanks, i asked because the Google PlayStore has WaterFox from waterfox.net. Not sure if this is real or fake, because other Fox forks can only be installed from Fdroid like Mull/Fennec