4 ms·
So they're saying "Privacy First: Guaranteed". How is it guaranteed though? Is there anything we can do to verify that claim or do we just have to believe them?
by rethab 8y ago
So they're saying "Privacy First: Guaranteed". How is it guaranteed though? Is there anything we can do to verify that claim or do we just have to believe them?
As far as I understand they're an American company, so if some government agency wants to have information, they will make them give the information by any means necessary.
- lysp 8y agoThey are being audited by a big-4 auditing firm.
- jve 8y ago> As far as I understand they're an American company, so if some government agency wants to have information, they will make them give the information by any means necessary. I don't get this attitude. Do you expect or want companies NOT to obey law? Or have criminals serve you DNS, which try to evade law?
- imdsm 8y agoCouldn't this be avoided altogether by not storing request data?
- function_seven 8y agoI think the preference is for companies not to be subject to certain US laws (e.g. Patriot act or NSLs that must be kept secret) Say whatever about the feasibility of this, just don’t try to make it a binary option between law-abiding or criminal.
- esotericn 8y agoI want companies, as people and as organizations, to behave ethically.
- rplnt 8y agoI don't think the statement implies any of that. Just that they can't guarantee privacy while operating in US.
- jve 8y agoWell having privacy is ok. However if there is an valid order to provide queries for specific source IPs, that is probably a reason to comply. If anyone asks for all data, well yeah, that is not ok.
- sergiosgc 8y ago> Do you expect or want companies NOT to obey law? Of course not. I expect privacy conscious companies to incorporate in privacy friendly countries. Or, to put it the other way around, I evaluate company privacy claims in the context of the law they operate in.
- HugoDaniel 8y agoIf the law is purposely working against the public best interest in violation of the right to privacy I expect them to make a moral stand. In USA the law provides them with a legal excape to avoid that moral stand, which they promptly do. It is not about "obeying law" as much as a the work of a soldier is "obeying superiors orders". There are moral limits. Now grow up and get to know yours.
- lucozade 8y ago> Do you expect or want companies NOT to obey law? Whose law? US law in this space says a lot about the rights of US citizens but a lot less about the rights of non-US citizens. So, yes it's reasonable to expect that a US company should obey the law but it doesn't follow that there's no reasonable concern with that. Having said that, I applaud Cloudfare for making this step. Just because something isn't NSA proof doesn't mean that it has no value. But the concern is valid given that Cloudfare, presumably, still have access to the lookup data.
- cpr 8y agoThey say they're not logging, so there's no data to supply to any spooks.
- lucozade 8y agoSure, but that doesn't mean, and is unlikely to mean, that they can't log. They won't be able to pass historic data as they, presumably, don't have it. But if they are formally requested to give information, at least for targeted users, my understanding is that they are legally obliged to comply i.e. they can't refuse to collect if asked. I believe there are caveats to that e.g. they can't be forced to backdoor an application but I don't believe that that would be necessary in this case.
- brazzy 8y agoFrom the website, 5 sentences after the part you cited: > We’ve retained KPMG to audit our systems annually to ensure that we're doing what we say.
- GrumpyNl 8y agoKPMG doenst have a very trustworthy reputation here in holland.
- RustySpottedCat 8y agoI've always wondered why Netherland citizens say Holland instead of the right name of the country.
- YouKnowBetter 8y ago1: It's easier to pronounce 2: Because it's easier to pronounce all foreigners use it 3: Because it's easier to pronounce and all foreigners use it, it is easier to use (If I introduce myself as being "from the Netherlands" I get blank looks. What I nowadays do is "I'm from Holland, Amsterdam, Ajax" and 90% of all people I know exactly where I am from). 4: Holland covers about 50% of the population, and about 70% of the economy 5: In Holland there is Amsterdam, Schiphol & Rotterdam basically the places that tourists go to or have heard about PS The official name is "Kingdom of the Netherlands", I guess that solidifies my point about Holland being easier :)
- majewsky 8y ago> PS The official name is "Kingdom of the Netherlands", I guess that solidifies my point about Holland being easier :) That's kind of shifting the goalposts though. It's not like I'm introducing myself as "from the Federal Republic of Germany", either.
- dvfjsdhgfv 8y ago> That's kind of shifting the goalposts though. It's not like I'm introducing myself as "from the Federal Republic of Germany", either. You should, just for the sake of these looks at parties.