I wrote an open letter to .
CloudFlare's vendor (Airtel) keeps blocking websites hosted on GitHub Pages for no reason without a court-order in India.
This has been ongoing for years, and developers deserve an answer.
github.com/captn3m0/hello
(Please RT)
Conversation
Replying to
What websites were blocked?
teachyourselvescs.com
coreui.io
neovim.io
usebottles.com
thephpleague.com
And probably hundreds more.
The only fix is to switch away from Flexible SSL (which is a dangerous product in today's world).
3
3
19
Because these sites are fronted by CloudFlare, a block notice is accompanied by a padlock because CloudFlare terminates the TLS.
[User] -> CloudFlare -> [Airtel] -> GitHub.
Such notices make the block appear authentic, and vetted by CloudFlare.
read image description
ALT
1
2
9
If you have more such reports, please file an issue/PR on the repository and let me know:
1
1
8
What can CloudFlare do about this?
1. Acknowledge the issue.
Airtel is doing these blocks without a court-order, and that deserves an explanation.
1
1
14
2. If Airtel can't fix this, switch to a network provider that can.
By continuing to use a known snoopy network provider as your upstream, you legitimize these blocks.
1
11
3. Warn your customers that use GitHub Pages
A huge number of developers use CloudFlare to proxy their websites because Flexible SSL was the easiest and cheapest way to setup TLS a decade ago.
Maybe these users should upgrade to Strict SSL today.
1
12
4. Publish a report
The developer community deserves to know how many websites were impacted and for how long.
1
9
Neither. The websites get blocked if your request (any ISP in India) reaches a CloudFlare POP (edge location) that has an Airtel network backbone.
2
8
Show replies
This happens for my portfolio (!!) website (akshatmittal.com) and the way I dealt with this was by enabling "Argo Tiered Cache" on Cloudflare which limits which POP can reach the origin which excludes DEL (on Airtel backbone).
should look at this!
2
7