3 ms·

This has nothing to do with Cloudflare WAF. Like I said our security level is very low and the Turnstile handling is done in a Worker And I'm sorry if you thin

This has nothing to do with Cloudflare WAF. Like I said our security level is very low and the Turnstile handling is done in a Worker And I'm sorry if you think that 2 users in 2 years having an issue when we have tens of thousands of paying users tips the scale of whether or not it is an overall net benefit for our company. If it wasn't for Cloudflare we simply wouldn't be able to provide the free versions of the software in the same fashion that we do now It sounds like you're upset at somebody who improperly configured Cloudflare on their sites and now you are blaming the company and everybody that uses it without having a solid understanding of the tech

esjeon 2y ago
It's more like a lot of people hate CF and that too much of the internet relies on it. It's not like they hate anyone specific.
randunel 2y ago
> 2 users in 2 years having an issue See, this is what makes Cloudflare's practises work. You are under the impression that 2 users in 2 years have had issues when, actually, 2 users in 2 years have bothered to jump through lots of hoops to finally contact you about your issues. Your SaaS business seems profitable, so keep it up! But don't go around claiming only 2 users have had issues, you most definitely don't have a 100% support contact rate for Cloudflare related issues.
- weird-eye-issue 2y ago
  There are not a lot of hoops. They would simply click the contact page and then use the email or live chat like I explained earlier. The WAF does not block anybody from accessing the site which I have been trying to explain to you. You are not listening because you are taking one experience with one site and then projecting that on to me.
  - randunel 2y ago
    > They would simply click the contact page and then use the email or live chat Perhaps I misunderstood. Is your contact page not behind cloudflare?
    - weird-eye-issue 2y ago
      Do you fail to comprehend that Cloudflare does not show any captchas and does not block anybody by default? And that blocking entirely depends on the site's settings? It can be both true that our entire website frontend (such as the contact page...) is behind Cloudflare and that nobody will be blocked. If you don't understand that it's not on me I've already tried to tell you several times now that we only use TURNSTILE for a couple specific actions in the app and that otherwise nobody is going to be blocked or shown a captcha... I'm not sure you realize just how flexible Cloudflare's security settings are and that if you are blocked it is entirely because the website owner set it up that way. I guarantee you that you access a ton of sites behind Cloudflare and you don't even realize it
      - randunel 2y ago
        > Do you fail to comprehend that Cloudflare does not show any captchas and does not block anybody by default? And that blocking entirely depends on the site's settings? Nope, it would appear that you fail to comprehend that users which are banned from ever reaching your website would never contact you. You can't know what you don't know, it's a natural limitation, you just can't yet wrap your head around this concept. I suggest re-reading the thread.
        weird-eye-issue 2y ago
        Users are never banned from reaching our website.
        randunel 2y ago
        The entire point of this thread is that, by simply using cloudflare as waf, users are outright banned without you knowing about it :)
rkagerer 2y ago
And I'm sorry if you think that 2 users in 2 years having an issue when we have tens of thousands of paying users tips the scale I get where they're coming from, but I really hate it when companies take this kind of view. Back when I grew my software company, I cared about every. single. one. of my customers.
- weird-eye-issue 2y ago
  You would have to have a very wacky setup to not even be able to pass Cloudflare Turnstile. Having that in place does not mean I don't care about my users. In fact we only put it on the login endpoint to help prevent abuse of people's accounts in the first place... Also, I want to add that we only put Turnstile on the login page once we had tens of thousands of active users and not a single person had any issue logging into their account. These are paid users, so I can guarantee you they would have been emailing us

esjeon 2y ago

It's more like a lot of people hate CF and that too much of the internet relies on it. It's not like they hate anyone specific.

randunel 2y ago

> 2 users in 2 years having an issue See, this is what makes Cloudflare's practises work. You are under the impression that 2 users in 2 years have had issues when, actually, 2 users in 2 years have bothered to jump through lots of hoops to finally contact you about your issues. Your SaaS business seems profitable, so keep it up! But don't go around claiming only 2 users have had issues, you most definitely don't have a 100% support contact rate for Cloudflare related issues.

weird-eye-issue 2y ago
There are not a lot of hoops. They would simply click the contact page and then use the email or live chat like I explained earlier. The WAF does not block anybody from accessing the site which I have been trying to explain to you. You are not listening because you are taking one experience with one site and then projecting that on to me.
- randunel 2y ago
  > They would simply click the contact page and then use the email or live chat Perhaps I misunderstood. Is your contact page not behind cloudflare?
  - weird-eye-issue 2y ago
    Do you fail to comprehend that Cloudflare does not show any captchas and does not block anybody by default? And that blocking entirely depends on the site's settings? It can be both true that our entire website frontend (such as the contact page...) is behind Cloudflare and that nobody will be blocked. If you don't understand that it's not on me I've already tried to tell you several times now that we only use TURNSTILE for a couple specific actions in the app and that otherwise nobody is going to be blocked or shown a captcha... I'm not sure you realize just how flexible Cloudflare's security settings are and that if you are blocked it is entirely because the website owner set it up that way. I guarantee you that you access a ton of sites behind Cloudflare and you don't even realize it
    - randunel 2y ago
      > Do you fail to comprehend that Cloudflare does not show any captchas and does not block anybody by default? And that blocking entirely depends on the site's settings? Nope, it would appear that you fail to comprehend that users which are banned from ever reaching your website would never contact you. You can't know what you don't know, it's a natural limitation, you just can't yet wrap your head around this concept. I suggest re-reading the thread.
      - weird-eye-issue 2y ago
        Users are never banned from reaching our website.
        randunel 2y ago
        The entire point of this thread is that, by simply using cloudflare as waf, users are outright banned without you knowing about it :)

rkagerer 2y ago

And I'm sorry if you think that 2 users in 2 years having an issue when we have tens of thousands of paying users tips the scale I get where they're coming from, but I really hate it when companies take this kind of view. Back when I grew my software company, I cared about every. single. one. of my customers.

weird-eye-issue 2y ago
You would have to have a very wacky setup to not even be able to pass Cloudflare Turnstile. Having that in place does not mean I don't care about my users. In fact we only put it on the login endpoint to help prevent abuse of people's accounts in the first place... Also, I want to add that we only put Turnstile on the login page once we had tens of thousands of active users and not a single person had any issue logging into their account. These are paid users, so I can guarantee you they would have been emailing us