Better off not using Cloudflare if you give a shit about the internet.
this post was submitted on 29 Oct 2025
64 points (95.7% liked)
Technology
81286 readers
4485 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
Why is Cloudflare bad for the internet?
You want a monopoly on all web traffic, that can be controlled by totalitarian governments and used to censor minorities and LGBTQ+ individuals?
Cause putting everything behind Cloudflare is gonna do that. Just look at the Amazon outage the other day or the M$ hosting crash today.
Cloudflare can’t be forced to censor anything because CDNs are not actually needed by the internet, they’re just nice to have. The only place where they could actually do anything is in the registrar business, where any foul play would just result in de-accreditation by ICANN.
AWS, Azure, and Oracle do have too much power over the internet, but that’s a different scenario.
This just seems like Cloudflare testing something that the CAs will eventually be running themselves, as opposed to them trying to supplant the CAs or something.
Shove it up your ass, Cloudflare.
Instead of just centralizing everything with Google, let's ALSO centralize all of that through Cloudflare too. If we centralize enough stuff onto enough different monolithic platforms it counts as decentralized, right? /s
the plan we’ve brought together with industry partners to the IETF
Sounds like it's very specifically not proprietary.
Centralized services are honestly mostly ran on opensource. The network effects can still be massive bottle neck for freedom for the rest of us though
No offense but CAs still don't support ed25519, a now 20 year old ECDSA standard that everyone uses basically everywhere else, including FIPS.
Although tbf I'm sure the NSA could yolo PKI in an "emergency" situation anyway by compromising a CA, though I don't think that would happen unless its literally WWIII.
Is this for quantum resistance? The certificates would be pretty large and they don't give a key agreement scheme, just signatures. They are clever but to deploy them on internet scale would take a lot of software changes in everything.