Editing Soot (section)

=== Cloudflare ===
[[File:Cloudflare screaming soyjak.png|thumb|A MITM attack by any other name...]]
{{Main|Cloudflare}}

At some point, Soot activated Cloudflare because ''>muh DDoS protection'' or something along those lines.

What is Cloudflare? It is a literal MITM attack, the "hackers that will steal your passwords" that all VPN advertisements talk about. (Not that you should trust a VPN either, see below why).

<blockquote>
''Note for a site to use cloudflare, the owner has to point their DNS records to cloudflare's servers, at which point they effectively handed cloudflare full control of their website (as long as the DNS records point to cloudflare's servers). They can prove control of a domain to certificate authorities who will issue certificates for your domain to cloudflare.''

''Now cloudflare has control to eavesdrop and log any user interactions with your website or silently tamper content if they please.''

''However, this is not a Man-in-the-Middle attack, because the website owner gave cloudflare permission to do all of this. So it's not an attack, it's a secure connection to cloudflare (who the website owner gave permission to serve content at their domain name).''

''[...]''

''In the end, that's all you have. You have to trust that the organization running the website at the other end is trustworthy with whatever data you give them by browsing there. When visiting websites on the cloudflare CDN part of the trust is in cloudflare.''

''(This is in contrast to real MitM attacks, where some attacking middleman who does not have authorized access eavesdrops and/or tampers with the network traffic).''<ref>https://security.stackexchange.com/a/177301</ref>
</blockquote>

''To do: has anyone archived any thread about this, and the sticky note thing?; Talk about 100 MB upload limit disrupting the wholesome Tom and Jerry poster on /webm/:'' https://archive.today/O340l