4 ms·
> Cloudflare does mostly use the browser's properties to determine if a manual check should be done Cloudflare uses the threat score of each IP address as a si
by tg180 2y ago
> Cloudflare does mostly use the browser's properties to determine if a manual check should be done
Cloudflare uses the threat score of each IP address as a signal to determine whether additional checks are necessary. A shared IP address is more likely to be associated with "issues", such as a compromised IoT device being used for DDoS attacks, one of your neighbours spamming a forum, ...
- OJFord 2y agoHow is it not a GDPR violation? Before I've even connected to the site I intended and had the opportunity to consent, an IP address that potentially uniquely identifies me (plus whatever else) is shared with a third-party data processor?
- tuckerman 2y agoThere is generally exceptions for anti-abuse/spam to some of the provisions of GDPR and the like. That said, is there really any 3rd party here? You are connecting to cloudflare and they are the ones that have seen this IP before and judging its behavior.
- OJFord 2y agoIt's a good point (made by sibling comment to yours too) but I do think it's a bit of a break-down in the intent of GDPR, or even 'not possible to satisfy requirement'? Because from a user's perspective, my relationship is with news.ycombinator.com or whatever - I don't (have to) know or care if the site uses Cloudflare, that's some other company, maybe I haven't even heard of it or have any other relationship with it. But now it is a company that the one I knowingly have a relationship with is causing to be made aware of information which uniquely identifies me. I didn't know there were anti-abuse/spam exceptions though, so I suppose that's it.
- Hikikomori 2y agoHow would it work with IP/Internet at all? Doesn't matter if the site is hosted in Cloudflare, aws or random datacenter.