> It makes perfect sense to add additional verification challenges for Tor users. I’m actually perfectly fine with that. The issue is how Cloudflare does it. T

> It makes perfect sense to add additional verification challenges for Tor users. I’m actually perfectly fine with that. The issue is how Cloudflare does it. They should just offer something like X-Cloudflare-Fraud-Score header or even <x-cloudflare-protected-frame /> tag (they’re already doing SSI), but instead they just nuke the hell out of everything. The way they do ‘protection’ is openly hostile to open web, or even neutral web. Whether this affects Tor disproportionately or not is a minor point.