3 ms·
Given Cloudflare appears to have received National Security Letters, it's possible their is no answers. That said, based on what I know, the answer is to white
by nxzero 11y ago
Given Cloudflare appears to have received National Security Letters, it's possible their is no answers.
That said, based on what I know, the answer is to whitelist the TOR IPs, give TOR users a global session that the user has the option to opt into (likely make sense for TOR publish what the impact of this is and Cloudflare to link to it in from that page) and always let users know a global session is set in case the user believe that using TOR they reset the session; resetting it via Cloudflare would be meaningless. General gist though is humans are not bots, don't behave as bots, and Cloudflare treats ever request as the same from an IP, which is a poor way to block bots.
- pfg 11y ago> That said, based on what I know, the answer is to whitelist the TOR IPs That's an option CloudFlare is offering to their customers now. > give TOR users a global session that the user has the option to opt into (likely make sense for TOR publish what the impact of this is and Cloudflare to link to it in from that page) and always let users know a global session is set in case the user believe that using TOR they reset the session Has this been researched or suggested by the Tor project at all? I think it's fairly dangerous to suggest CloudFlare starts offering something like this before it has been vetted.