Comment by 0x073

13 hours ago

As cloudflare is the gateway for half the Internet and the other half is meta Google and Microsoft, I would prefer to share my IP with the website I visit instead some big tech companies.

But maybe I get privacy wrong.

This separates who sees what. Cloudflare (or any OHTTP gateway) sees who talks to who, but can't see the content. The service sees the content but not who you are/your IP.

You can imagine a lot of threat models where who you talk to isn't sensitive, nor is "someone talked to them about X" but knowing both facts is a risk.

  • For a single transaction that's great. The problem is whene a large fraction of the internet is served by a single entity (say cloudflare), then that entity has information about what sites/customers were visited by a specific ip address, and which ip addresses visited a certain site/customer.

    Although, that is still better than them having the source ip and the content.

There are other CNDs, and Cloudflare isn't event the largest one, it has best marketing and free solutions.

What if the solution is garbage? There are ad blockers that click every ad. Random google searches, random chatbot searches, random clicks.

I have a feeling that privacy is easier to protect if you just mix what you want to hide with a lot of garbage.

Why not both? When browsing Microsoft, give your IP to Cloudflare. When browsing Pouet, give your IP to Pouet.

Many of those websites are hosted by big tech companies via their cloud offerings. These clouds have even developed software for reading files within the VMs they are hosting.