3.1 KiB
3.1 KiB
Whitelist
| insurer | ALEC member | sensitive info exposed to CloudFlare | supported CISPA | forced drug testing of staff | notes |
|---|---|---|---|---|---|
| American Family | n | n | n | n | |
| Erie | n | n | n | n | |
| N&D Group | n | n | n | n | no website, only an access-restricted Facebook page |
| The General | n | n | n | n |
Graylist
| insurer | ALEC member | sensitive info exposed to CloudFlare | supported CISPA | forced drug testing of staff | notes |
|---|---|---|---|---|---|
| Allianz | n | n | 🕵 | 🧪 | Amazon AWS-hosted |
| American Modern | n | n | n | n | Google Cloud-hosted |
| Ameriprise Financial | n | n | 🕵 | 🧪 | akamai hosted |
| Berkshire Hathaway | n | n | n | 🧪 | |
| First American Insurance Agency | n | n | n | 🧪 | |
| Gen Re | n | n | n | n | parent: Berkshire Hathaway; akamai hosted, but transactional site www.genre-connect.com is not. |
| Grange Mutual | n | n | n | 🧪 | |
| Horace Mann | n | n | n | 🧪 | no website, only an access-restricted Facebook page |
| MetLife | n | n | 🕵 | 🧪 | Amazon AWS-hosted; transactional site identity.metlife.com is not AWS |
| National General | n | n | n | 🧪 | formerly GMAC |
| Selective | n | n | n | 🧪 | pushes CloudFlare javascript, but apparently execution is optional. |
| Shelter Insurance | n | n | n | 🧪 | |
| Stewart Information Services Corporation | n | n | n | 🧪 | Amazon AWS-hosted |
| Travelers | n | n | 🕵 | 🧪 | akamai hosted |
Blacklist
| insurer | ALEC member | sensitive info exposed to CloudFlare | supported CISPA | forced drug testing of staff | notes |
|---|---|---|---|---|---|
| 21st Century | n | n | n | n | parent: Farmers |
| Allied | n | n | 🕵 | 🧪 | Tor-hostile resources; Amazon AWS-hosted |
| Allstate | n | n | 🕵 | 🧪 | Tor-hostile resources; akamai hosted |
| Amica | n | n | n | n | |
| Brown & Brown Insurance | n | 🌩 | 🕵 | n | |
| Esurance | n | n | n | n | parent: Allstate; akamai hosted |
| Farmers | 👌 | n | n | 🧪 | akamai hosted |
| Foremost | n | n | n | 🧪 | parent: Farmers |
| Geico | 👌 | n | n | 🧪 | akamai hosted but transactional site ecams.geico.com is not. |
| Harleysville Group | n | n | n | n | parent: Nationwide |
| Hartford | n | n | 🕵 | 🧪 | Tor-hostile resources; akamai hosted |
| Infinity | n | n | n | 🧪 | |
| Lexington | 👌 | n | n | n | Tor-hostile resources; landing page allows Tor access but all links therein refuse Tor; AIG partner |
| Liberty Mutual | 👌 | n | 🕵 | n | Tor-hostile resources; akamai hosted |
| Mercury | n | n | n | 🧪 | |
| Nationwide | 👌 | n | 🕵 | 🧪 | Tor-hostile resources; Amazon AWS-hosted |
| Progressive | n | n | n | 🧪 | |
| Safe Auto | n | n | n | n | Tor-hostile sign-in page despite Tor-friendly landing page. |
| Safeco | n | n | n | n | Tor-hostile resources; parent: Liberty Mutual; akamai hosted |
| State Farm | 👌 | n | 🕵 | 🧪 | Tor-hostile resources; edgecast-hosted |
| Titan | n | n | n | n | parent: Nationwide |
| USAA | n | n | 🕵 | 🧪 | |
| Western Mutual | n | 🌩 | n | n |