November 28, 2025
Privacy goes polar
GrapheneOS Moving Out of France
GrapheneOS pulls out of French servers—privacy fans roar, skeptics snark
TLDR: GrapheneOS is pulling its services off French hosting, citing safety and anti-encryption pressure, and that’s delaying features like Pixel 10 support. Commenters brawled over France vs. North America on privacy, joked about fleeing to the Arctic, and argued it’s a provider swap, not an actual exodus.
Privacy darling GrapheneOS says it’s ditching French hosting and rotating its “digital locks,” after warning France isn’t safe for encryption and reporting harassment against its team. Cue the comment section going nuclear. The legal angle lit up first: one user claimed that refusing to hand over a phone PIN is protected in the U.S./Canada but can be criminalized in France—fuel to the “get out now” crowd. Others rolled their eyes, noting the move is mostly about switching server providers, not packing suitcases. Links to earlier flamewars flew in (here, and here), keeping receipts at the ready.
Then came the geopolitics popcorn. A top quip: “Out of the frying pan, into the fire?” as the project eyes Canada and other hosts. Meanwhile, doom-posters imagined privacy refugees huddling on a drifting Arctic icefield, asking if humanity has a plan B. Techies tried to calm nerves, pointing out GrapheneOS signs and verifies everything—apps, updates, the works—so users won’t get sneaky downgrades. But drama lovers fixated on the delayed Pixel 10 support and the team’s claim of chat raids, making this feel less like a routine server shuffle and more like a privacy thriller. The vibe: part security briefing, part meme-fest, all heat.
Key Points
- •GrapheneOS has decommissioned all active servers in France and is exiting OVH.
- •TLS and Let's Encrypt account keys will be rotated; DNSSEC keys may also be rotated.
- •Update integrity is enforced with multiple layers: App Store, Android package manager, System Updater, update_engine, and Verified Boot.
- •Update mirrors are hosted on ReliableSite (Los Angeles, Miami) and Tempest (London), with temporary London hosting; DNS anycast runs on Vultr and BuyVM using BGP.
- •Canadian OVH servers running email, Matrix, forum, Mastodon, and attestation will move to Netcup short-term and Toronto colocation long-term; Pixel 10 experimental support is disrupted.