I find this surprising seeing as cloudflare blocked me on shared wifi while traveling internationally from accessing many sites, claiming it was to prevent email spam. They were blocking more sites than over zealous hotel and government internets. When I started a thread about how they were blocking from a significant percentage of hotel and coffeeshop wifi's in various countries their response was find other wifi. Really seems like you need to turn down the filtering.
We are working to fix that. It's not trivial because there are many bad Tor users and we don't want to just 'whitelist' Tor otherwise it'll make Tor more attractive for bad folks.
"Supporting everyone means that all CloudFlare sites are accessible to everyone who uses the web"
Your goal is to support everyone from a technological perspective but also profile everyone to block anyone AI deems "bad". Somehow I don't think the creators of the web envisioned a single corporation acting as a gatekeeper and judge of moral character on such a pervasive scale in this way.
Good reminder generally, but on our mind specifically as we think through browser makers' plans to deprecate SHA1 for HTTPS connections. We'll post more on that topic soon.
Nice, but what does this mean for CloudFlare specifically? It's usually not CF but their customers who make websites that are heavy to download or render.
Is it things like continue to support HTTP 1.0/1.1 and older ciphers when required?
couldn't help but look at that pic of the Berners-Lee Mosaic and think...this is for everyone, unless you're in places like...India...Eastern China...Australia..actually all of Asia-Pac...haha. ;-) ;-)
This includes both console-mode browsers and shell-based tools such as curl or wget.
Your goal is to support everyone from a technological perspective but also profile everyone to block anyone AI deems "bad". Somehow I don't think the creators of the web envisioned a single corporation acting as a gatekeeper and judge of moral character on such a pervasive scale in this way.
What if I am okay with not supporting Android 2.x which doesn't ciphersuite Y?
Is it things like continue to support HTTP 1.0/1.1 and older ciphers when required?
https://youtu.be/4As0e4de-rI?t=1h17m25s