Joe

A nanotube garrote would be the talk of the town.

Deemix is a good way to build up your local cache from Deezer, at which point you can serve it locally.

It will mess with artist renumeration though (which seems important to you), so you might want to find another way to compensate your favourite artists.

PFS matters where a party hasn’t already been compromised. Not so hard.

Read up on perfect forward secrecy and TLS.

And yes, a jurisdiction could compel them to break their security, depending on laws and ability to threaten.

IF TLS is used AND configured optimally on both ends, THEN the in transit message contents should be very secure, in that transient session keys were used.

I would be interested to know how often those two preconditions hold true though.

Of course, this is only one small link in the chain. There aint no magic bullet.

Welcome to the world of Carrier Grade NAT. 100.64.0.0/10 is reserved for this.

If you are lucky, you also have an IPv6 address. The catch is you need IPv6 on the client-side too.

A VPS or similar running wireguard and a proxy might bridge the gap.

It might also be possible to ask your provider for some port forwarding. Probably not, but check anyway.

Good luck!

Dynamic DNS is probably still required, unless his ISP issues dedicated or very long term IPv6 leases.

IPv6 may also “just work” nowadays, too, especially if the aim is to connect from mobile or other consumer networks. Corporate environments are still hit & mostly miss.

If you torrent copyrighted material in Germany, you definitely want a VPN. Private law firms “representing copyright holders” regularly request information about consumers based on source IPs/protocol/ports from ISPs with a court’s rubber stamp, then send out demand letters for hundreds of euros, with a risk of thousands if you choose to fight it.

Sometimes they follow up if you ignore it, sometimes not. It is horribly oppressive.

tl;dr germans who torrent from a consumer internet service should use a vpn