Hacker News Reader

Yes. I have said it before and I say it again: Cloudflare (and any other large CDNs) are a perfect setup for a MITM or a perfect target for a nation-state's secret service.

View on HN

Especially when cloudflare is governed by the laws of the US which includes the patriot act. How do we know this isn't already the case?

If your threat model includes intelligence agencies, set up your own HTTPS with HSTS and HPKP and don't use CloudFlare.

Wow, that was easy.

So, basically anyone providing online services to customers then? Who's threat model should not include intelligence agencies? Online pet shop?

It comes down to personal opinion more than anything.

Reply on news.ycombinator.com