3 ms·
Cloud flare is American and we know since the PRISM scandal that US based tech companies are directly plugged into the NSA, and everybody in the chain will deny
by BiteCode_dev 7y ago
Cloud flare is American and we know since the PRISM scandal that US based tech companies are directly plugged into the NSA, and everybody in the chain will deny it under the threat of prison.
So, if this rolls out 'as-is' in any other country than the US, we will go from "all DNS requests are clear text, but dispatched among many entities" to "DNS requests are encrypted, but all read and controlled by american agencies".
We (may) have gain (some) privacy (maybe). But we also (certainly) gained a serious dependency.
- rndgermandude 7y agoThey only enabled it by default for US users, so at this time it doesn't really matter. shrugs When they roll out in the EU, I will pay close attention to how they are doing it, what partners they use under what jurisdictions etc.
- BiteCode_dev 7y agoSame. Gotta also make sure I don't get a US Firefox build somehow.
- rndgermandude 7y agoYou can always disable DNS-over-HTTPS in the network preferences, or set or own resolver, e.g. https://news.ycombinator.com/item?id=22412656 https://news.ycombinator.com/item?id=22412656 But good point, now I am curious how they detect US-ness. Probably a combination of using the en-US and some geo lookup?
- dralley 7y agoThe page, which you didn't read, specifically makes the point that they have no plans to roll this out (by default) anywhere except for the US.
- BiteCode_dev 7y agoNowhere it says they have no plan of doing it. They just release it only for the US __build__, __by default__, __now__. But to make things more honest, I'll edit my comment.
- peteretep 7y agoNSA don’t factor into my personal threat model _at all_ where random ISPs snooping and selling do. I would gladly give the NSA all of my traffic unencrypted in exchange for decent commercial privacy
- BiteCode_dev 7y agoI supposed not having a dictatorship regime in your country history book helps to see things that way. Given the way my country went from freedom to "regime de Vichy" in a few years, during my grandpa time, I don't want a state level entity having that kind of power. Since the US state level entities decided they could now ignore Habeas Corpus and legitimated torture, secret courts and declared impunity for them-self, I especially don't want them to have that kind of power.
- peteretep 7y agoIf a malicious power takes over your country they’ll hit you with a rubber hose until you give up your secrets much before they give a shit about your internet history, I suspect.
- BiteCode_dev 7y agoQuite the contrary, as shown by as most dictatorships across the world trying to control their piece of the internet. The biggest example being the Big Firewall of China. This let them control how people think, communicate, consume and inform them-self. But also detects anyone that could oppose the regime. Or make a graph of all allies, suspects, etc. Then you hit them with a rubber hose :)
- afiori 7y agoThat is the case if they are targeting you, what you should likely worry about is if they take interest in you.