Hacker News Reader

> Cloudflare has never modified the intended destination of DNS responses at the request of law enforcement or another third party.

Didn't they modify the DNS responses of mit.edu to point back to MIT (during the 2013 domain hijack incident)? This canary seems a bit ambiguous.

View on HN

I assume by "third party" they mean an outside request from someone who doesn't own the service they're hosting. MIT is unambiguously the first-party owner of MIT.edu, even though a third party used Cloudflare to hijack it.

That would not be either law enforcement or another third party though, if MIT requested it point back to them.

Reply on news.ycombinator.com