Cloudflare is now powering Microsoft Edge Secure Network

Re:Cloudflare is now powering Microsoft Edge Secure Network by gruez on Thursday September 28, 2023 @12:53PM (#37692339)

>However, in this case, and because of the ClientHello permutation in Chromium based browsers[1] such as Edge, Cloudflare gets a high-entropy identifier + IP address, which, along with SNI header inspection, could be theoretically used to identify individual users.

As per your own source, a different permutation is used per connection, so it's unclear how it would help to "identify individual users".

[ Parent | on HN ]

Re:Cloudflare is now powering Microsoft Edge Secure Network by supriyo-biswas on Thursday September 28, 2023 @01:04PM (#37692518)

I stand corrected wrt the operators; while the diagram mentions that there is an ingress and egress component, it is not clear as to whether two different entities operate them. I've updated my comments to reflect that.

Iff they're the same operator, I assume there'd be a TLS connection between Microsoft Edge Secure and the Edge browser, and that'd be a long-lived session because of the nature of proxying traffic, which means there's a static identifier. Even if it wasn't, IP addresses may themselves be considered as sensitive enough for such identification.

[ Parent | on HN ]