Re:Cloudflare is now powering Microsoft Edge Secure Network
by jjav on Friday September 29, 2023 @03:26PM
(#37709021)
> Only that if anyone was going to run a company like Cloudflare, we're lucky it's Matthew, he's not a dumbass.
This may be totally true, but it's extremely important to understand that it does not matter.
As a US-based company Cloudflare is subject to NSLs (https://en.wikipedia.org/wiki/National_security_letter) which will force them to reveal all traffic and never talk about it. There's nothing they can do to resist that, regardless of founder personality.
Combine this with the fact that Cloudflare terminates TLS traffic, so it's all in the clear within their infrastructure. It would be difficult to think of a more juicy target for intelligence agencies waving NSLs.
It'll all be classified so we'll never know (unless some future Snowden tell us). But it is logical and wise to assume all traffic passing through Cloudflare is siphoned off in cleartext to the TLAs.
This may be totally true, but it's extremely important to understand that it does not matter.
As a US-based company Cloudflare is subject to NSLs (https://en.wikipedia.org/wiki/National_security_letter) which will force them to reveal all traffic and never talk about it. There's nothing they can do to resist that, regardless of founder personality.
Combine this with the fact that Cloudflare terminates TLS traffic, so it's all in the clear within their infrastructure. It would be difficult to think of a more juicy target for intelligence agencies waving NSLs.
It'll all be classified so we'll never know (unless some future Snowden tell us). But it is logical and wise to assume all traffic passing through Cloudflare is siphoned off in cleartext to the TLAs.