this post was submitted on 20 Dec 2023
11 points (82.4% liked)
Privacy
1251 readers
28 users here now
Icon base by Lorc under CC BY 3.0 with modifications to add a gradient
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
They are basically MITM (man-in-the-middle) attack all the traffic that passes through their servers. Most Cloudflare defenders will tell you it's not technically MITM as the site operators gives them permission to do that, but the end result is the same.
Even though sites are encrypted, they hold the decryption key, so they can see all traffic in plain text.
I agree.
One of the reasons no one gives a shit is there is never news about CF making use of that MitM position. But I know they hire data scientists and what corp can resist the urge to monetize data they have access to? So I think it’s just a matter of time before they get caught abusing the vast amount of valuable data they have visibility on.