2 ms·

USian tech-CEO posting petulant self-serving arguments about "FREEDOM" on twitter? what a cliche cloudflare have deliberately designed their network so that ev

by blibble 9mo ago

USian tech-CEO posting petulant self-serving arguments about "FREEDOM" on twitter? what a cliche cloudflare have deliberately designed their network so that every IP can serve up every cloudflare website this means a court order can't block a single cloudflare site without blocking every cloudflare site, causing massive collateral damage I suspect this is a deliberate business decision: an attempt to raise the "cost" of blocking so high that courts won't attempt to do it at all and then they make arguments about "it's not technically possible", when it is (farm the target of the orders off to a separate pool of IPs) and for DNS they could apply a filter based on the source IP country of origin Prince: please, please, please exercise your empty threat, and withdraw your shitty company's services from Italy and then you'll watch as Italy then raises it at the EU level, and then you'll have to do the same there too

great_wubwub 9mo ago
> this means a court order can't block a single cloudflare site without blocking every cloudflare site Not true. Cloudflare can't block only a single web site _by IP address_ but that's pretty common with IPv4, The same is true of Fastly and AWS and I'd be shocked if there's a mass-market CDN out there that has a unique IPv4 address per customer. They can absolutely block any site they want at the application layer (SNI or Host header or whatever they use, IDK, I'm a network guy).
- blibble 9mo ago
  > I'd be shocked if there's a mass-market CDN out there that has a unique IPv4 address per customer. fortunately you only need to farm out the ones out that are under court orders > They can absolutely block any site they want at the application layer (SNI or Host header or whatever they use, IDK, I'm a network guy). these court orders usually work by getting end user ISPs (which are regulated) to block or reroute the IP and/or DNS entry neither of which can be realistically done due to conscious decisions by cloudflare

by blibble 9mo ago

great_wubwub 9mo ago

> this means a court order can't block a single cloudflare site without blocking every cloudflare site Not true. Cloudflare can't block only a single web site _by IP address_ but that's pretty common with IPv4, The same is true of Fastly and AWS and I'd be shocked if there's a mass-market CDN out there that has a unique IPv4 address per customer. They can absolutely block any site they want at the application layer (SNI or Host header or whatever they use, IDK, I'm a network guy).

blibble 9mo ago
> I'd be shocked if there's a mass-market CDN out there that has a unique IPv4 address per customer. fortunately you only need to farm out the ones out that are under court orders > They can absolutely block any site they want at the application layer (SNI or Host header or whatever they use, IDK, I'm a network guy). these court orders usually work by getting end user ISPs (which are regulated) to block or reroute the IP and/or DNS entry neither of which can be realistically done due to conscious decisions by cloudflare