EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS

02.17.19

Don’t Use Cloudflare Because You Impose This on People Who Least Want It

Posted in Servers at 8:21 am by Dr. Roy Schestowitz

It may also put these people at risk

Cloudflare

Summary: Reasons to stop making the World Wide Web so heavily dependent on some dubious companies like Cloudflare, which already has a worrisome track record

OVER the years, at work and at home (e.g. in social control media), I have expressed strong (but polite) criticism of Cloudflare (or CloudFlare or CF) and its dangers — to the point where its oversensitive staff decided to block my Twitter account (not due to abuse or because I spoke to them, they just didn’t want to see anything I had said). I’ve rarely come across so thin-skinned a company and recently I have seen people making the very same points. So here’s the gist of it all: Cloudflare is a MitM (man in the middle) and this enables Cloudflare to engage in censorship, surveillance and even worse things. Cloudflare has done both things in the past and was at times caught misusing its power. Cloudflare is no ordinary CDN but a private, for-profit company that’s upselling. At times they also have technical issues and I’ve seen not just companies but public institutions forced offline (or into semi-working order) due to Cloudflare.

Each time we come under heavy DDOS attack (we have not had such issues for a number of months) someone out there asks us why we don’t use Cloudflare. Explaining all the associated issues is time-consuming as the explanation can be lengthy.

“In some cases, for particular countries, having all traffic visible to the US (through an American company with legal obligations to its government) can be a matter of life and death.”I’ve been dealing with Cloudflare since it was a young company, however reluctantly, at work. I’ve seen public institutions coming to rely on this foreign company and relaying all traffic through it. That raises all sorts of legal questions.

The bottom line is, never ever use Cloudflare. When accessing sites that route traffic through Cloudflare one might in fact be denied access (e.g. Tor users or people who rightly reject JavaScript). In that case, it’s wise to leave (not enter the site), instead leaving a note to the Webmaster, urging him/her to drop Cloudflare.

Sites that respect their visitors do not resort to Cloudflare. Building one’s own CDN may be expensive, but what is the worth of your visitors’ rights? In some cases, for particular countries, having all traffic visible to the US (through an American company with legal obligations to its government) can be a matter of life and death.

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Reddit
  • co.mments
  • DZone
  • email
  • Google Bookmarks
  • LinkedIn
  • NewsVine
  • Print
  • Technorati
  • TwitThis
  • Facebook

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

What Else is New


  1. Maintaining the 'Delete Github' page

    "This list really is a starting point, which can hopefully increase awareness about the issue of concern."



  2. Linux Foundation Picking Money

    The dating standards of the Linux Foundation



  3. Microsoft 'Borrows' the Linux Brand

    With help from the likes of the Linux Foundation Microsoft continues to misuse and ‘dilute’ the Linux brand (and registered trademark)



  4. EPO Corruption Compared to Cocaine Scandals in Antwerp

    Days after the Dutch protest discussion is sort of 'uncorked' regarding EPO corruption (published, as usual, in the form of anonymous comments)



  5. SUEPO Showed That the Media Won't Cover EPO Corruption Until Half the Workers March in the Streets

    What ought to have been a central (if not 'the' central) issue of debate in Europe is still being treated as borderline irrelevant or marginal



  6. Meanwhile in California

    News from California is being spun by Microsoft this week, owing to weak journalism that's more like PR than journalism



  7. Privacy-Centric Services and Even Drupal/Acquia Defect to the Camp of Mass Surveillance

    In search of money [pun intended] companies and services that are supposed to respect their customers and users turn out to be doing the opposite; this merits research and public discussions



  8. IRC Proceedings: Monday, November 11, 2019

    IRC logs for Monday, November 11, 2019



  9. Links 12/11/2019: Sparky 2019.11 Special Editions and Twisted 19.10.0 Released

    Links for the day



  10. Microsoft's Abduction of the Voice of Its Opposition Highlights the Urgency of the Movement/Campaign to Delete GitHub

    Microsoft understands that by entrapping FOSS and GNU/Linux inside proprietary software platforms like GitHub and Azure it can utilise the false perception that it somehow speaks on behalf of both (whilst attacking both)



  11. IRC Proceedings: Sunday, November 10, 2019

    IRC logs for Sunday, November 10, 2019



  12. SUEPO Protests Against Management of the European Patent Office Brought Back Discussions About Corruption

    The atmosphere at the second-largest institution in Europe has long been toxic; now it is becoming a lot more visible again and comments highlight the reasons for the cover-up (gross misuse of billions of euros)



  13. Links 11/11/2019: Linux 5.4 RC7, HandBrake 1.3.0 and Analysis of XFCE

    Links for the day



  14. Links 10/11/2019: digiKam 6.4.0, OpenMandriva Lx 4.1 Alpha and OpenZFS Plans

    Links for the day



  15. Video: Dutch Media on EPO Protest

    The new video added by SUEPO on Saturday in order to show Dutch media coverage of last week's protest in The Hague



  16. Politics in the Workplace Are Not Paradoxical and Outside the Workplace They Are Free Speech

    The safest space is one in which no other human (or creature) exists, but in reality we must make compromises and accept that not everyone will agree with us 100% of the time (so we must learn to live with that)



  17. IRC Proceedings: Saturday, November 09, 2019

    IRC logs for Saturday, November 09, 2019



  18. Thick Skin Makes Strong Communities

    Learning to coexist with people who don't agree on everything is a strength and successful societies encourage that (the alternative is blind conformity on all matters)



  19. Training (Proprietary Software) Versus Teaching (Free Software)

    Education necessitates software freedom — a fact that companies like Adobe, Apple and Microsoft try hard to distract from



  20. The Linux Foundation Brought as Keynote Speakers People Vastly Worse Than Those Whom It Now 'Cancels' for Purely Political Reasons

    A lot of people are very upset about the Linux Foundation's alleged 'witch-hunt' and even press coverage has caught up with the outrage; but our position is that it distracts from vastly bigger Linux Foundation scandals



  21. An Open Letter to Richard Stallman

    "It's past the time for the official cornerstones of the Free software movement to return to their full operational capacity, and to take the gear out of neutral."



  22. Links 9/11/2019: Linux Journal Goes Dark (Offline), KStars 3.3.7, OpenSUSE Name Change Aborted

    Links for the day



  23. Think Tanks, Bristows, 'Simmons' and 'Birds' Can Only Ever Lie to Us About the Dead Unified Patent Court (UPC)

    The UPC is a dead bird, but lobbyists of the litigation giants would have us believe otherwise, in “In-depth Analysis” which is anything but (it's just propaganda with the veneer of officialism)



  24. The EPO's Management is Trying Really Hard to Distract the Media From EPO Unrest (and It Has Been Partly Successful)

    We take a look at the profoundly bad situation at the EPO (examiners unable to do their job properly because of rogue leadership); we also reexamine how media covered — or rather refused to cover — this urgent issue



  25. Microsoft's 'Safe Spaces'

    The 'new' and 'ethical' Microsoft that offers us all a 'safe space'



  26. 'Artificial Intelligence' (AI) Will Only Doom Patent Offices If It's Used to Stamp Millions of Invalid Patents (IPs)

    The Artificial Intelligence (AI) craze is being used as an excuse or as a pretext for granting loads of patents on mathematics and statistics (maths and stats aren't permissible or eligible for patent coverage); by calling just about everything "Artificial Intelligence" (or AI, or "hey hi!") they hope to mislead examiners, who are also being presented with new guidelines full of these buzzwords



  27. Need More Questions

    Pedophilia-centric scandals associated with Bill Gates or people working for Bill Gates don't interest the media anymore; people shy away from the possibility of 'embarrassing' the so-called 'philanthropist', celebrated by the media he is sponsoring



  28. IRC Proceedings: Thursday, November 07, 2019

    IRC logs for Thursday, November 07, 2019



  29. Helps to Have Connections and Operate at a Loss Just to Drive the Competition Out of the Market

    Microsoft still uses the same anticompetitive tactics and outright illegal tactics such as bribery, but we're supposed to think Microsoft is run like a charity



  30. Startpage Shows Sheer Hypocrisy After Selling Out and Betraying Privacy (Corrected)

    After more than half a decade of using and advocating Startpage I've come to realise it's a spying operation and Startpage hopes nobody will notice


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts