Not strictly within the normal way DNS works, no. A CNAME record response can only contain another domain or subdomain name. You would have to run a webserver that listens on the IP that the CNAME record eventually pointed to, in order to handle redirections to a specific URL.

Have you actually analyzed what your real bottleneck is?

Raspberry Pi Pico-based*

authentication is also stuck behind their subscription. for random customers to be able to use your servers, you also have to let everyone else on the internet use it.

It's also an attack on legitimate services that get inundated with spam/bots/abuse/etc. and one of many reasons why they're not a widespread thing to begin with.

There are a good number of resources for what you want but I don't want to name names because they should stay hard to find on purpose IMO.

There's also many other e2ee chat apps that don't require a phone number such as SimpleX, Briar, Tox, Session etc.

I wouldn't be surprised if most CAs are secretly compromised. I'm surprised nobody ever talks about it or wants to know how they operate securely if at all.

double same

People need to get this through their heads, XMPP is the only solution for their problems.

Strongly disagree and this sounds like dangerous FUD to me. For one, there's comparatively zero users across XMPP anyways, and it has a big problem with compatibility across different software packages. It also does nothing to help the problems stated in the video of massive droves of abusive content and server operators unknowingly hosting copies of it across the world. Then there's the privacy and GDPR minefields that come with any decentralized/federated service.

The problem is the evidence requires linking to channels hosting CSAM, so nobody is going to provide that for you.

unfortunately most people working at subway now are young, and have no idea what you're talking about.

you can't even order a subway melt anymore without explaining what it is.

Windows has implemented quite a few tricks to make this very difficult without setting off antivirus engines

That's funny because we have been shipping a commercial Windows app since XP that is keylogger-based using SetWindowsHookEx, and it has only tripped users' antivirus maybe 1 or 2 times in 20 years.

I wonder if there's a desktop distro out there that enforces sandboxed applications by default.

EasyOS is the first distro I've seen that at least runs every app as its own user by default, similar to Android.

even more obvious question, why not Qt?