what-to-do.md 5.3 KB

What you can do to resist Cloudflare?
Website consumer
  • If the website you like is using Cloudflare, tell them not to use Cloudflare.

You are just helping corporate censorship and mass surveillance.

https://trac.torproject.org/projects/tor/ticket/24351

  • Try not to use their service. Remember you are being watched by Cloudflare.

  • Search for other website. There are many alternatives and opportunites on the internet!

  • If your browser is Firefox, use one of these add-ons.

Name Can Block Can Notify
Block Cloudflare MITM Attack II Yes Yes
Block Cloudflare MITM Attack Yes Yes
Searxes' Third-party Request Blocker Yes Yes
Detect Cloudflare No Yes
  • Convince your friends to use Tor Browser on the daily basis. Anonymity should be the standard of the open internet!
Website owner / Web developer
  • Do not use Cloudflare solution. You are loser if you fall to that easy solution. You can do better than that, right?

  • Install Web Application Firewall (such as OWASP) and Fail2Ban on your server and configure it properly.

  • Set up Tor Onion Service or I2P insite if you believe in freedom and welcome anonymous users.

  • Ask for advice from other Clearnet/Tor dual website operators and make anonymous friends! :)

Software user
  • If you use Debian GNU/Linux, or any derivative, subscribe to bug #831835. And if you can, help verify the patch, and help the maintainer come to the right conclusion on whether it should be accepted.

  • Always recommend Tor Browser for desktop and Orfox for smartphone. Other software's privacy is imperfect. This doesn't mean Tor browser is "perfect". There is no 100% secure nor 100% private on the internet and technology.

Let's talk about other software's privacy...

Action
  • Tell others around you about the dangers of Cloudflare. But don't talk with NSA employee; you'll be definitely marked... just kidding!

  • Help improve this repository, both the lists, the arguments against it and the details.

  • Document and make very public where things go wrong with Cloudflare (and similar companies), making sure to mention this repository when you do so

  • Get more people using Tor by default so they can experience the web from the perspective of different parts of the world.

  • Start groups, in social media and meatspace, dedicated to liberating the world from Cloudflare.

  • Where appropriate, link to these groups on this repository - this can be a place for coordinating working together as groups.

  • Start a coop that can provide a meaningful non corporate alternative to Cloudflare.

  • Let us know of any alternatives to help at least provide multiple layered defence against Cloudflare.

  • Try using globalist to maintain this list.

  • If you are in the United States of America and the website in question is a bank or an accountant, try to bring legal pressure under the Gramm–Leach–Bliley Act, or the Americans with DIsabilities Act and report back to us how far you get.

  • If the website is a government site, try to bring legal pressure under the 1st Amendment of the US Constitution.

  • If you are EU citizen, contact the website to send your personal information under the General Data Protection Regulation. If they refuse to give you your information, that's a violation of the law.

  • For companies that claim to offer service on their website try reporting them as "false advertising" to consumer protection organizations and BBB. Cloudflare websites are served by Cloudflare servers.