3 ms·
While we extended our network into China, we also took steps to ensure that all customer data would be kept secure. No CloudFlare customer traffic will pass thr
by eastdakota 11y ago
While we extended our network into China, we also took steps to ensure that all customer data would be kept secure. No CloudFlare customer traffic will pass through the China network unless a customer explicitly opts in to the service. Sites' log data from traffic outside of China is never sent into China. And, for customers that opt in to serving content inside China, customer identifiable information such as email addresses, password hashes, and billing information is not sent to the China network nor ever shared with Baidu.
Other potentially sensitive information is also kept outside of China. For instance, CloudFlare's Keyless SSL technology allows us to serve encrypted traffic for customers who opt-in to the China network without having to store private SSL keys inside the country. CloudFlare can keep our customers' keys outside of China, if they choose to, while still providing our full suite of services inside China.
As part of this partnership, CloudFlare was never asked nor did we ever volunteer to provide any data about any of our users to Chinese, United States, or any other governments’ regulatory authorities. Had that been a requirement of entering the region we would have passed on the opportunity.
- p1mrx 11y agoNone of the things you said relate to the government having raw access to the plaintext before TLS is applied. Given the parties involved, it seems obvious that this is just a second, more efficient GFW that runs on Baidu's servers instead of at the border.
- chinathrow 11y agoWould your statement "nor did we ever volunteer" still be true if you could assume that the infrastructure you're running on (ie. baidu) is rigged to act as a passive interception point?