4 ms·
That’s been my pet theory from day 1, and not because of DDoS. Simply because they are the SSL terminator for most of the internet and can see anything going on
by sph 6mo ago
That’s been my pet theory from day 1, and not because of DDoS. Simply because they are the SSL terminator for most of the internet and can see anything going on in cleartext (and I’ve seen them protecting some shady stuff)
I recall a PRISM slide showing the diagram of Google and the public internet, with a big arrow on GFE saying, quote, “SSL added and removed here! :-)”
If NSA aren’t installed at Cloudflare, I wonder what they are even doing.
- breppp 6mo agoThat slide was about the NSA sitting inside Google data centers without Google's knowledge. That doesn't mean collusion
- xorcist 6mo agoThat's the thing though: We can't know that.
- deleted 6mo ago[deleted]
- DaSHacka 6mo agoWell, we kind of can, given that "SSL added and removed here :-)" was a pretty explicit workaround to the issue of encrypted communications in Google's infrastructure, just not between sites (IIRC). Either way, if they were directly colluding with Google, they would have had a much simpler time siphoning off that data.
- tanh 6mo agoDDoS is just one of the impetuses for a service provider be MiTM'd
- linkregister 6mo agoIt's within the realm of possibility that NSA is collecting data with Cloudflare's consent. It seems unlikely that Cloudflare would jeopardize their entire business model over it. Unlike other companies in the leaked NSA slides that participated in PRISM, Cloudflare would face a near-total loss of customers. Their entire value proposition is being an unobtrusive traffic intermediary.
- sph 6mo ago> Unlike other companies in the leaked NSA slides that participated in PRISM, Cloudflare would face a near-total loss of customers People didn’t care when they learned about PRISM, why would they care now when it’s a known fact? The sane stance would be to assume Cloudflare is in cahoots with NSA.
- linkregister 6mo agoAll the companies involved in PRISM made public statements saying they ceased participation. Google undertook a costly initiative to add encrypted connections over their datacenter circuits. The NSA leaks were a forcing function that led to a massive uptake of encryption. Up until that point it was common for websites to support only HTTP. The NSA leaks dominated news cycles for the entirety of 2013.
- lukewarm707 6mo agomy llm api traffic terminates tcp at cloudflare in lovely plain text :/ it does give better peering. reduces latency a bit for me.
- my-next-account 6mo agoI had no idea that this was a thing. How can you figure out where SSL turns into plain text on its route to the destination?
- lukewarm707 6mo agoin this case it's my design to use cloudflare. but you can also see from curl or traceroute, that the endpoint you talked to was a cloudflare ip and your ssl ended there. after that you can't see inside cloudflare.
- netdevphoenix 6mo ago> All the companies involved in PRISM made public statements saying they ceased participation. Google undertook a costly initiative to add encrypted connections over their datacenter circuits This is as helpful as Whatsapp's so called E2E encryption comms (that just happens to not be applicable by default in certain situations).
- sph 6mo agoTo add: apparently that PRISM slide got its own Knowyourmeme entry: https://knowyourmeme.com/memes/ssl-added-and-removed-here https://knowyourmeme.com/memes/ssl-added-and-removed-here
- nottorp 6mo ago> I’ve seen them protecting some shady stuff Hmm do we want them to decide what stuff is shady and what isn't? We're already allowing payment processors to do that and it's not good.
- Chu4eeno 5mo agoSorry for necro-replying, but assuming you're talking about cloudflare they already do. They took down KF (which is hosted in the US, so seemingly to be legal), but have always allowed everything from sites dedicated to livestreaming animal abuse to ISIS-affiliates hosting beheading videos (both which AFAIK is illegal).