Comment by __MatrixMan__
2 hours ago
Sure, it can go either way, and so which version to use is a decision to be made by the user, not on their behalf by a vendor.
Consider the CrowdStrike debacle. It wouldn't have been a big deal if they could just boot to yesterday's config because today's config is broken, but neither vendor involved trusts their users enough for that kind of thing, which turned it into a disaster.
Forgot about that. I intially thought you were referring to CloudFlare Captcha's, which Google and Firefox are partnering with: https://www.techtimes.com/articles/318891/20260623/cloudflar...
It's remarkable how much more time one has to wait just to access the same level of information (Cookie Policy, EULAs, etc).
Even with "lighter" weight HTTP Firewall utilities such as Anubis (https://github.com/techaroHQ/anubis), the average user has to pay for other's (DDoSers) misdeeds. Now no one can visit a site without a firewall unless it's static and rate-limited by IP address to avoid crashing a small home server. Some impressive LMDBs might be able to serve up to 100,000 requests per second on a lightweight PC, but then again they could still be knocked offline from a super resourceful organization. I like not putting all my eggs in one basket.
A similar bug could happen with something like Cloudflare- the computer serving up the firewall could have a bug, and it's not programmed to fall back on serving the site without the gatekeeping. If the site is prominent enough, it might routinely face DoS attacks which prevents it from being used. But if it's an uneventful day, it could still manage a lower-tech firewall and still be functional.