9 ms·

Great eye! We haven't figured out how to expose them yet for sites not using Cloudflare. We do have some experience solving this problem for Spectrum [1] we're

Great eye! We haven't figured out how to expose them yet for sites not using Cloudflare. We do have some experience solving this problem for Spectrum [1] we're hoping to lean on. The most important thing to us is users don't expect us to keep their IP private, as that is not the intent of WARP. 1- https://blog.cloudflare.com/mmproxy-creative-way-of-preserving-client-ips-in-spectrum/ https://blog.cloudflare.com/mmproxy-creative-way-of-preservi...

fnordsensei 7y ago
Are you going out of your way to forward the original IP to the end recipient? What's the point of that? Is it to support IP authenticated logins or similar?
- r1ch 7y ago
  Most likely so the receivers of abusive traffic can contact the original ISP rather than Cloudflare having to deal with abuse reports.
  - basch 7y ago
    analytics.
- dgudkov 7y ago
  For instance, to play nicely with IP whitelisting in firewalls as an additional security measure.
- e12e 7y ago
  Not step on the toes of Netflix, Amazon Prime and other services that rely on geo location for enforcing licensing of content / geo-location based artificial scarcity of digital goods?
- fjni 7y ago
  I'd like an answer to this also! It sounds like cloudflare spent the time to do away with hiding ip addresses. Actively removing that feature of a VPN, which you should get for free in a wireguard implementation, seems fishy to say the least. Especially since no reasonable explanation for this was given.
- fro0116 7y ago
  From the deafening silence I'm going to take the less charitable interpretation that it's meant to enable Cloudflare to essentially sell Warp users' IPs to Cloudflare customers as an added perk.
  - fnordsensei 7y ago
    That is a bit worrying.
commoner 7y ago
Although Warp doesn't mask IP addresses, it should be useful for these two use cases: 1) Communicating with insecure websites (HTTP instead of HTTPS) 2) Using unsecured wireless networks (e.g. Wi-Fi at a coffee shop) Beyond these two cases, is there any advantage to using Warp? Does Warp provide any benefits for email (secure IMAP/SMTP), file sharing (BitTorrent), or other protocols?
- yjftsjthsd-h 7y ago
  It looks decent for hiding your traffic from your ISP
  - commoner 7y ago
    Thanks, this should have been obvious in hindsight. One more for people with cell phone plans that don't adhere to net neutrality: Warp can probably bypass quality caps on video streaming. Traditional VPNs are strictly better than Warp+, as far as I can see, but the free version of Warp is a generous offering for users who would otherwise not be using a VPN.
    - dylz 7y ago
      Warp excludes many sites from traffic routing (like video)
      - commoner 7y ago
        Are you sure? Some comments like this one say that Warp affects YouTube speed: https://news.ycombinator.com/item?id=21070988 https://news.ycombinator.com/item?id=21070988
      - ubercow13 7y ago
        Source? That seems like a huge caveat - WARP protects your privacy except for specific sites you visit that Cloudflare silently decides on?
eis 7y ago
Thank you for your reply. I see that it's rather easy to do that for websites running behind CF as you terminate the traffic and can just set the corresponding header. But for websites outside your network I don't see any obvious way how to do that. Wouldn't this being possible imply that it's possible to spoof traffic? That would open a whole can of worms for the web and even the internet at large. But I also get your point that you don't want people to see WARP as a regular VPN to protect a users IP address from being exposed to the other side. Since it's not easy for a user to see which sites run behind CF and which ones don't while browsing they must keep this in mind. Or they can just firewall all CF IPs minus the ones used by WARP (assuming none are shared with other CF products and a list can be obtained).
lancepioch 7y ago
Can you have an option to do that? I imagine in some cases it might be better for people (in certain regions or roles) where their IP being hidden is a core component of "Privacy First".
pedrocx486 7y ago
>The most important thing to us is users don't expect us to keep their IP private I would dare to say you're wrong. It's one big reason I wouldn't/won't use Warp.
- skygazer 7y ago
  I think that you're in agreement; he seems to have meant that it was important that Cloudflare clarify to users that their IPs will not be masked.
  - pedrocx486 7y ago
    On the app stores it's shown as a privacy tool. Nowhere they make it clear, which is honestly a bit sad.

fnordsensei 7y ago

Are you going out of your way to forward the original IP to the end recipient? What's the point of that? Is it to support IP authenticated logins or similar?

r1ch 7y ago
Most likely so the receivers of abusive traffic can contact the original ISP rather than Cloudflare having to deal with abuse reports.
- basch 7y ago
  analytics.
dgudkov 7y ago
For instance, to play nicely with IP whitelisting in firewalls as an additional security measure.
e12e 7y ago
Not step on the toes of Netflix, Amazon Prime and other services that rely on geo location for enforcing licensing of content / geo-location based artificial scarcity of digital goods?
fjni 7y ago
I'd like an answer to this also! It sounds like cloudflare spent the time to do away with hiding ip addresses. Actively removing that feature of a VPN, which you should get for free in a wireguard implementation, seems fishy to say the least. Especially since no reasonable explanation for this was given.
fro0116 7y ago
From the deafening silence I'm going to take the less charitable interpretation that it's meant to enable Cloudflare to essentially sell Warp users' IPs to Cloudflare customers as an added perk.
- fnordsensei 7y ago
  That is a bit worrying.

commoner 7y ago

Although Warp doesn't mask IP addresses, it should be useful for these two use cases: 1) Communicating with insecure websites (HTTP instead of HTTPS) 2) Using unsecured wireless networks (e.g. Wi-Fi at a coffee shop) Beyond these two cases, is there any advantage to using Warp? Does Warp provide any benefits for email (secure IMAP/SMTP), file sharing (BitTorrent), or other protocols?

yjftsjthsd-h 7y ago
It looks decent for hiding your traffic from your ISP
- commoner 7y ago
  Thanks, this should have been obvious in hindsight. One more for people with cell phone plans that don't adhere to net neutrality: Warp can probably bypass quality caps on video streaming. Traditional VPNs are strictly better than Warp+, as far as I can see, but the free version of Warp is a generous offering for users who would otherwise not be using a VPN.
  - dylz 7y ago
    Warp excludes many sites from traffic routing (like video)
    - commoner 7y ago
      Are you sure? Some comments like this one say that Warp affects YouTube speed: https://news.ycombinator.com/item?id=21070988 https://news.ycombinator.com/item?id=21070988
    - ubercow13 7y ago
      Source? That seems like a huge caveat - WARP protects your privacy except for specific sites you visit that Cloudflare silently decides on?

eis 7y ago

Thank you for your reply. I see that it's rather easy to do that for websites running behind CF as you terminate the traffic and can just set the corresponding header. But for websites outside your network I don't see any obvious way how to do that. Wouldn't this being possible imply that it's possible to spoof traffic? That would open a whole can of worms for the web and even the internet at large. But I also get your point that you don't want people to see WARP as a regular VPN to protect a users IP address from being exposed to the other side. Since it's not easy for a user to see which sites run behind CF and which ones don't while browsing they must keep this in mind. Or they can just firewall all CF IPs minus the ones used by WARP (assuming none are shared with other CF products and a list can be obtained).

lancepioch 7y ago

Can you have an option to do that? I imagine in some cases it might be better for people (in certain regions or roles) where their IP being hidden is a core component of "Privacy First".

pedrocx486 7y ago

>The most important thing to us is users don't expect us to keep their IP private I would dare to say you're wrong. It's one big reason I wouldn't/won't use Warp.

skygazer 7y ago
I think that you're in agreement; he seems to have meant that it was important that Cloudflare clarify to users that their IPs will not be masked.
- pedrocx486 7y ago
  On the app stores it's shown as a privacy tool. Nowhere they make it clear, which is honestly a bit sad.