3 ms·
> Do you expect or want companies NOT to obey law? Whose law? US law in this space says a lot about the rights of US citizens but a lot less about the rights o
by lucozade 8y ago
> Do you expect or want companies NOT to obey law?
Whose law? US law in this space says a lot about the rights of US citizens but a lot less about the rights of non-US citizens. So, yes it's reasonable to expect that a US company should obey the law but it doesn't follow that there's no reasonable concern with that.
Having said that, I applaud Cloudfare for making this step. Just because something isn't NSA proof doesn't mean that it has no value. But the concern is valid given that Cloudfare, presumably, still have access to the lookup data.
- cpr 8y agoThey say they're not logging, so there's no data to supply to any spooks.
- lucozade 8y agoSure, but that doesn't mean, and is unlikely to mean, that they can't log. They won't be able to pass historic data as they, presumably, don't have it. But if they are formally requested to give information, at least for targeted users, my understanding is that they are legally obliged to comply i.e. they can't refuse to collect if asked. I believe there are caveats to that e.g. they can't be forced to backdoor an application but I don't believe that that would be necessary in this case.