5 ms·
The author pushes one sided Cloudflare's line on both client subnets and DoH (given APNIC maybe he should disclose affiliation). There is nothing accurate about
by zzzcpan 7y ago
The author pushes one sided Cloudflare's line on both client subnets and DoH (given APNIC maybe he should disclose affiliation). There is nothing accurate about it. Client subnet extension doesn't violate any privacy in any threat model you can imagine, Cloudflare just wants all the competing CDNs, which are DNS based, to get more wildly inaccurate results on picking nodes. And DoH is outright anti-privacy tech pretending to be about privacy, since a lot of people have no clue that encryption is orthogonal to privacy.
- jgrahamc 7y ago> Cloudflare just wants all the competing CDNs, which are DNS based, to get more wildly inaccurate results on picking nodes. That's a bunch of crap.
- kodablah 7y agoSo is their sentence after that one.
- bluejekyll 7y agoBy accurate I didn’t mean unbiased, the client subnet discussion clearly shows a bias against the feature. I wouldn’t say it was inaccurate—though, the article definitely comes down strongly against it. I am unaware of the affiliation of the author, so I’m not trying to defend that relationship or the entities mentioned. Factually, it all seems accurate, though it could very easily be argued that it leaves some things out and leans in a particular direction on all of the issues it does cover.
- ryanlol 7y ago>Client subnet extension doesn't violate any privacy in any threat model you can imagine Credit card fraud.
- bluejekyll 7y agoCan you expand on how it’s being used to contribute to credit card fraud? I could speculate, but if you have a source that would be really helpful.
- ryanlol 7y agoThe client subnet extension is frequently used by anti-fraud providers to catch leaky proxies used by credit card fraudsters.
- bluejekyll 7y agoDo they realize they're relying on easily spoofed data?
- ryanlol 7y agoThat is the nature of their business.
- tptacek 7y ago"DoH is outright anti-privacy tech" in what way? DoT and DoH are functionally equivalent, the only practical difference being that DoT can be filtered by ISPs and network operators, and DoH can't. DoH is simply DoT without the kill switch.