Hacker News Reader

(author) Interesting. That may have been what I ran into. carl itself was unaffected, just proxying through it.

It's probably part of about detection system which cf is usually trying to prevent for their customers. It'd be a relatively easy to detect metric to add to a score for that kind of thing. A bot using a browser use agent string but the wrong tls settings is probably very common.

Cloudflare does not care about MITM enterprise proxy nor mass surveillance, so there should be wiggle room to get it to work.