3 ms·
nope -- as stated, up to the website owner. They can whitelist Tor if they'd like to. Entirely the website owner's decision to make.
by xxdesmus 9y ago
nope -- as stated, up to the website owner. They can whitelist Tor if they'd like to. Entirely the website owner's decision to make.
- gsich 9y agoCloudflare is responsible for even providing such a "feature". They aren't off the hook here.
- xxdesmus 9y agoIndeed, our security service allows our customer (the website owner) the option to adequately protect their website. I'm not sure you actually made a point other than to confirm that we allow website owners to fully whitelist Tor if they'd like to.
- gsich 9y agoopt-in vs. opt-out
- xxdesmus 9y agoNot sure your point. Who exactly do you anticipate is opt-ing? The website owner's settings defaults to secure, and they can intentionally take action to make the website less secure if they'd like to. That is their decision, of course we do not default to a less secure posture.
- gsich 9y agoWhat I meant. This default setting is the reason why Cloudflare is not off the hook here. This is the default, so website owners who don't care or know about it won't change it. Like all default settings where you have to actively change it.
- ocdtrekkie 9y agoDefault settings should be secure. As the Cloudflare article points out, 94% of their traffic over Tor was malicious.
- gsich 9y agothen at least force the user to set this. I don't care if the traffic is 'malicious' whatever the definition of that is.