←back to thread

Mitigating the Hetzner/Linode XMPP.ru MitM interception incident

(www.devever.net)
341 points hlandau | 1 comments | 20 Oct 23 20:31 UTC | HN request time: 0.238s | source
Show context
mike_d ◴[20 Oct 23 23:34 UTC] No.37962674[source]▶
Great callout:

> Don't use Cloudflare or similar services. See my article here for an explanation on why. If you use a service like this, you're basically already MitMing yourself.

I wish more people would realize that when arguing on the internet about CAA, DNSSEC, NSA, etc. that none of it really matters. We willingly allow a government aligned entity to unwrap 20% of all TLS connections on the internet and peak inside.

replies(3): >>37962900 #>>37963174 #>>37964536 #
worldofmatthew ◴[21 Oct 23 00:14 UTC] No.37962900[source]▶
Cloudflare is horrible for privacy. It is also a bit of a sovereignty issue for European countries to have all their citizens web habits to be MITM by a forging power (no matter how friendly they seam).

Edit: not even going in to the sovereignty issue of having an American private company effectively decide your internet regulations.

replies(2): >>37963087 #>>37964622 #
ronsor ◴[21 Oct 23 00:44 UTC] No.37963087[source]▶
The EU regularly de-facto tries to decide regulations for other countries. All is fair in a globally connected world.
replies(2): >>37963429 #>>37966139 #
1. Sporktacular ◴[21 Oct 23 01:59 UTC] No.37963429[source]▶
Yeah, but it generally goes in the direction of more privacy, environmental and labor standards. Less so from other countries.