Citation? The only case I'm aware of is when they removed DDoS protection for the Daily Stormer[0], and tbqh that made me feel more positively toward them. Yes, it was an impulsive, emotionally-motivated choice but that was relatable to me.

[0] https://blog.cloudflare.com/why-we-terminated-daily-stormer/

▲

ppseafield an hour ago | parent | next [-]

It wasn't an impulsive decision. They kept the Daily Stormer's account active up until Andrew Anglin said CF kept offering him their services because they quietly agreed with him.

> Our terms of service reserve the right for us to terminate users of our network at our sole discretion. The tipping point for us making this decision was that the team behind Daily Stormer made the claim that we were secretly supporters of their ideology.

> Our team has been thorough and have had thoughtful discussions for years about what the right policy was on censoring. Like a lot of people, we’ve felt angry at these hateful people for a long time but we have followed the law and remained content neutral as a network. We could not remain neutral after these claims of secret support by Cloudflare.

https://blog.cloudflare.com/why-we-terminated-daily-stormer/

▲

OutOfHere 4 hours ago | parent | prev | next [-]

Cloudflare is known to extort customers.

https://news.ycombinator.com/item?id=44150898 (2025)

https://news.ycombinator.com/item?id=40481808 (2024)

https://robindev.substack.com/p/cloudflare-took-down-our-web...

Reddit comments report more such incidents, with Cloudflare demanding an upgrade to Enterprise. This has also come up for other sites, such as gambling sites.

Also, Cloudflare implicitly screws over everyone by leaking data to the NSA.

▲

esseph 2 hours ago | parent [-]

> Also, Cloudflare implicitly screws over everyone by leaking data to the NSA

I have always operated under the assumption that every cloud provider and telco does this, so this claim has always seemed very silly to me.

▲

OutOfHere 2 hours ago | parent [-]

Huh. When you don't use a man-in-the-middle service, you don't have this problem. When you host on a cloud vendor, you don't have this problem because you control the HTTPS certificate and don't leak it to the MITM. The assumption as such seems silly to me.

▲

esseph an hour ago | parent [-]

Your DNS lookups and IPs in use provide a lot of info. It's not always the data inside an encryption layer that is the most important.

That said, these are US companies subject to FISA court orders and NSLs or National Security Letters. If they want your data, they can just pull it from memory in real time or pull it directly from the hypervisor and dump it wherever they're instructed to. Any idea that your data is protected because you're not even using a provider WAF or doing TLS termination for load balancing is a fantasy.

	▲	OutOfHere 36 minutes ago \| parent [-]
		> Your DNS lookups Please. I control which DNS server I use. It is not relevant to the matter at hand. > If they want your data, they can just pull it from memory in real time or pull it directly from the hypervisor and dump it wherever they're instructed to. You're confusing bulk data collection with selective court-ordered data collection. The two are not alike. Attempting to equate them is a dumb attempt at deception on your part. There is no obligation for a firm to share all web data with the NSA.

▲

encom 3 hours ago | parent | prev [-]

>impulsive, emotionally-motivated

Yes that's precisely how I want infrastructure to operate.