The hidden cost, of course, is that the NSA learns everything there is to know about you and your customers. Cloudflare is the LG TV of websites, but it's worse because we've known it has an always-on microphone and speech-to-text for over a decade and we still keep using it for some reason.
reply> The hidden cost, of course, is that the NSA learns everything there is to know about you and your customers
replyYou're replying to a comment talking about migrating from Google, so I assume you're claiming this is more of a risk with Cloudflare than Google (or other American providers like AWS)?
If so, what's your source for that claim?
That doesn't seem unique to Cloudflare though
replyNo, but nothing comes close to their breadth and scale.
reply"We've known it has an always-on microphone and speech-to-text for over a decade"
replyLiterally? What is the reference here?
reply
Yeah, about those I know, but what about cloudflare?
replyThey hold your tls keys and can decrypt all your traffic. They have to be able to in order to cache appropriately.
replyIf you care about security and specifically NSA, don't use US clouds (owned or hosted), period. There is not a single one they don't have full access to, why should there be one.
replyOr clouds in general, its all wishful thinking and pinky promises.
Is there any evidence of this
replyWell it is known SSL termination servers are a popular target: https://arstechnica.com/tech-policy/2013/10/new-docs-show-ns...
replyThe reputational damage for CF would be intense.
replyBusinesses won't tolerate something like this so I find it hard to believe there is any cooperation between the two entities.
> Basically, there is no cost aside from the domain. And for registering and managing domains, they are pretty much the most affordable option as well.
replyYou don't need to register your domain with them. Only make their DNS servers your domain name servers.