3 ms·

The trust we have in the CAs who are embedded in our root stores is very important - yes. Thankfully, in this case the issue at hand is entirely unrelated to T

The trust we have in the CAs who are embedded in our root stores is very important - yes. Thankfully, in this case the issue at hand is entirely unrelated to TLS, rogue CAs etc. Or even DNS record manipulation (for now)... Cloudflare put a 'You're blocked' page, on the web server that Cloudflare are already running for their customer. The customer being the website that Cloudflare is being ordered to block (for users in certain countries).

strken 1y ago
Cloudflare's actions seem to me to be similar to sending out letters saying "this client has been banned from using our services" using that client's own letterhead. Are they not misrepresenting the communication as though it's from the client, when really it's from Cloudflare? Sure, it's benign, but it's an unnecessary muddying of the waters.