Conversation

Cloudflare drops sites from their service on a daily basis for having content they dislike. They remove sites with adult content, support for sex workers, etc. They also drop sites they deem to be posting spam. Cloudflare's censored 1.1.1.3 DNS blocks lots of LGBT content, etc.

40

1,996

10K

Replying to

I assume 1.1.1.3 also blocks KF

2

Replying to

and

Also switter seems to have been blocked from hosting, not from DDoS protection? I'm not very sin be this seems to be the case

1

Replying to

Cloudflare banned Switter from using their DDoS protection which is provided as part of their caching reverse proxy. Cloudflare's main service is the reverse proxy. They weren't hosting Switter, they were proxying to it, which they say doesn't count as hosting the content.

1

2

Replying to

Do you have a link? Vice seems to say they hosted it

1

Replying to

Cloudflare has been saying that their caching reverse proxy doesn't count as hosting sites but the overall consensus is that it counts as them being part of hosting the site. It's in their interest to portray it as not being hosting to reduce the responsibility people expect.

1

1

Replying to

I think proxying isn't hosting but the always online caching thing is

1

Replying to

Their proxy is inherently caching based on Cache-Control / Expires headers. It tries to cache everything it can cache and then serves it from cache until it's supposed to revalidate. At that point it does conditional fetch that only actually fetches the content if it has changed.

1

1

Replying to

and

Always online is an optional feature for when the origin server goes down to continue serving stale content from the cache even though the expiry time has passed. Whether or not you use that, the caching is how their CDN works and is also essentially part of DDoS mitigation.

2

1

Replying to

I think it doesn't count as hosting responsibility-wise without the Always Online thing, even if it actually is hosting technically. Legally is probably a different story too though

1

Replying to

Cloudflare being used that way stops people from figuring out the origin server hosting company which is part of the purpose of it. That means the only people you can ask to take down the content are Cloudflare and they just forward your requests with your identity to the site.

12:11 PM · Sep 1, 2022Twitter Web App

Replying to

I'm aware

Replying to

and

If you want to ask the company hosting the origin server to send a takedown request, you have to find a misconfiguration leaking the IP address, etc. Cloudflare is the only thing that's visible without an issue like that since it's sitting in front of the site.

1

Replying to

and

They'll respond to court orders for litigation or law enforcement. But if your plan is another social media pressure campaign, that's almost certainly out of scope.

1