‹ BackHN Continuity

Thread

Building a certificate authority for the whole Internet

73 points · 57 comments · ewpratten

  1. m463 · · focus · HN ↗
    Just say no. Cloudflare should not be the gatekeeper for the internet.
    1. sneak · · focus · HN ↗
      They're not. You're free to run and visit websites that don't use CF, and you're free to get certs from non-CF CAs. What on Earth makes you think that they are any sort of gatekeeper of the web?
      1. fragmede · · focus · HN ↗
        The fact that an increasing percentage of the web uses them for interdiction.
        1. kdkcienciencjs · · focus · HN ↗
          By choice. There’s absolutely nothing keeping you from using other providers and not using CloudFlare does not block you in any way.
          1. fragmede · · focus · HN ↗
            Not using Cloudflare means I can't access a site that I don't run that has chosen to use Cloudflare. I can choose not to use that site, but my life will be lessened for that, so not using Cloudflare blocks me in that way.
            1. sneak · · focus · HN ↗
              The site operator gets to choose who they serve to, and they choose not to serve to people who don’t want their traffic proxied through Cloudflare. That’s not Cloudflare gatekeeping, that’s a decision by the site operator.
              1. fragmede · · focus · HN ↗
                And in a world where the site operator is perfectly spherical, with unlimited free time and budget, you'd have a point.

                > What on Earth makes you think that they are any sort of gatekeeper of the web?

                Unfortunately, site operators have to operate on the Internet we actually have, full of DDoS attacks and wanton scrapers, so a sufficient number of site operators have chosen to use Cloudflare, so as to reduce their burden, so in isolation, yeah, sure, the problem is that in aggregate, they do have keys to the gate of sufficiently large swaths of the Internet, that they are de facto gatekeepers of that particular portion of the Internet.

                If you are privileged enough to be able to opt out of that portion of the Internet, count yourself lucky!

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.