Cloudflare tells the public email forwarding is “private by design”

This commit is contained in:
cyberMonk 2022-08-04 09:47:43 +02:00
parent 430f998412
commit 1617f017db
1 changed files with 4 additions and 1 deletions

View File

@ -75,6 +75,7 @@
[freedom0]: https://lists.gnu.org/archive/html/directory-discuss/2017-02/msg00000.html
[greenwash]: http://web.archive.org/web/20210730102406/blog.cloudflare.com/crawler-hints-how-cloudflare-is-reducing-the-environmental-impact-of-web-searches
[tarpit]: http://web.archive.org/web/20210730102406/blog.cloudflare.com/crawler-hints-how-cloudflare-is-reducing-the-environmental-impact-of-web-searches
[emailisprivate]: http://web.archive.org/web/20220802214251/developers.cloudflare.com/email-routing/
# CloudFlare
@ -203,7 +204,9 @@ CloudFlare is a vigilante extremist organization that takes the decentralized we
1. CloudFlare has [hijacked][TrademarkTroll] the name of a tool that protects user *from* CloudFlare: [Cloud Firewall][cloudFW]. Cloud Firewall is a browser add-on that helps users block CloudFlare sites that they visit inadvertently. CloudFlare recently created a product of their own that uses the same name. Web searches for "Cloud Firewall" fill the first page of results with links to their corporate product, and with the browser add-on buried.
1. False errors are displayed when j/s is disabled.
1. CloudFlare [deceives][1] website visitors into believing their connection is secure (HTTPS & browser padlock) when in fact the user is MitMd.
1. CloudFlare has been caught making false statements to the public. CF said in their [FaQ][34]: "*Why should I trust Cloudflare? You dont need to. The Cloudflare Onion Service presents the exact same certificate that we would have used for direct requests to our servers,*" the first part of which is incorrect. CloudFlare sees all traffic traversing their servers in the clear, regardless of how secure the tunnel to them is. So of course CloudFlare requires your trust. The second statement about certificates is non-sequitur and irrelevant to the question of trust. This is a pattern. CloudFlare [claims][RBIzeroTrust] browser isolation *"is a zero-trust approach"*, then proceeds to advertise their *remote* browser isolation service, which gives CloudFlare a view of everything the user accesses and sees on their browser window, including sessions to non-CloudFlare websites. They repeatedly [spread][rbi] the "Zero Trust web browsing" lie without being held accountable by *truth in advertizing* laws.
1. CloudFlare has been caught making false statements to the public.
1. CF said in their [FaQ][34]: "*Why should I trust Cloudflare? You dont need to. The Cloudflare Onion Service presents the exact same certificate that we would have used for direct requests to our servers,*" the first part of which is incorrect. CloudFlare sees all traffic traversing their servers in the clear, regardless of how secure the tunnel to them is. So of course CloudFlare requires your trust. The second statement about certificates is non-sequitur and irrelevant to the question of trust. This is a pattern. CloudFlare [claims][RBIzeroTrust] browser isolation *"is a zero-trust approach"*, then proceeds to advertise their *remote* browser isolation service, which gives CloudFlare a view of everything the user accesses and sees on their browser window, including sessions to non-CloudFlare websites. They repeatedly [spread][rbi] the "Zero Trust web browsing" lie without being held accountable by *truth in advertizing* laws.
1. Cloudflare [claimed email forwarding is “privat by design”][emailisprivate].
1. CloudFlare [deceives][35] users about what the problem is, causing users to blame Tor or their browser. CloudFlare suggests to Tor users who reach the CAPTCHA "If you are on a personal connection, like at home, you can run an anti-virus scan on your device to make sure it is not infected with malware."
1. Lack of human decency -- CF's mean-spirited CEO [displays][36] [schadenfreude][37] amid the grief his company has caused innovative people who use the web non-maliciously.
1. Ironically, CloudFlare spams people (despite their spam-mitigation purpose). Customers (former and current) as well as people who never used CF are receiving spam from CloudFlare. Customers [receive spam][38] from CF without express consent and possibly contrary to privacy policies. This is deceptive because spam mitigation is one of CloudFlare's selling points.