←back to thread

Mitigating the Hetzner/Linode XMPP.ru MitM interception incident

(www.devever.net)
341 points hlandau | 1 comments | 20 Oct 23 20:31 UTC | HN request time: 0s | source
Show context
mike_d ◴[20 Oct 23 23:34 UTC] No.37962674[source]▶
Great callout:

> Don't use Cloudflare or similar services. See my article here for an explanation on why. If you use a service like this, you're basically already MitMing yourself.

I wish more people would realize that when arguing on the internet about CAA, DNSSEC, NSA, etc. that none of it really matters. We willingly allow a government aligned entity to unwrap 20% of all TLS connections on the internet and peak inside.

replies(3): >>37962900 #>>37963174 #>>37964536 #
worldofmatthew ◴[21 Oct 23 00:14 UTC] No.37962900[source]▶
Cloudflare is horrible for privacy. It is also a bit of a sovereignty issue for European countries to have all their citizens web habits to be MITM by a forging power (no matter how friendly they seam).

Edit: not even going in to the sovereignty issue of having an American private company effectively decide your internet regulations.

replies(2): >>37963087 #>>37964622 #
ronsor ◴[21 Oct 23 00:44 UTC] No.37963087[source]▶
The EU regularly de-facto tries to decide regulations for other countries. All is fair in a globally connected world.
replies(2): >>37963429 #>>37966139 #
rini17 ◴[21 Oct 23 12:11 UTC] No.37966139[source]▶
That is how American tech monopolies like to paint what the EU does. Lol
replies(1): >>37974437 #
immibis ◴[22 Oct 23 11:24 UTC] No.37974437[source]▶
dumb question: why do I have the option to downvote your comment, but not many other comments in this thread?
replies(1): >>37980542 #
1. greyface- ◴[23 Oct 23 01:17 UTC] No.37980542{3}[source]▶
Downvoting is only available for comments that are less than 24h old and not replies to you.