Delivery-Date: Tue, 16 Sep 2014 01:15:13 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.9 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
	RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 186871E0D13;
	Tue, 16 Sep 2014 01:15:12 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 08B2726585;
	Tue, 16 Sep 2014 05:15:08 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id F22E2263D5
 for <tor-talk@lists.torproject.org>; Tue, 16 Sep 2014 05:15:03 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id Ej2IjpsEqu6g for <tor-talk@lists.torproject.org>;
 Tue, 16 Sep 2014 05:15:03 +0000 (UTC)
Received: from patternsinthevoid.net (greyarea.patternsinthevoid.net
 [106.187.37.158])
 by eugeni.torproject.org (Postfix) with ESMTP id 79CA324542
 for <tor-talk@lists.torproject.org>; Tue, 16 Sep 2014 05:15:03 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by patternsinthevoid.net (Postfix) with ESMTP id DB23C374146
 for <tor-talk@lists.torproject.org>; Tue, 16 Sep 2014 05:14:59 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at patternsinthevoid.net
Received: from patternsinthevoid.net ([127.0.0.1])
 by localhost (greyarea.patternsinthevoid.net [127.0.0.1]) (amavisd-new,
 port 10024)
 with ESMTP id Ax5QxRq_xFba for <tor-talk@lists.torproject.org>;
 Tue, 16 Sep 2014 05:14:54 +0000 (UTC)
Date: Tue, 16 Sep 2014 05:13:16 +0000
From: isis <isis@torproject.org>
To: tor-talk@lists.torproject.org
Message-ID: <20140916051316.GO32100@patternsinthevoid.net>
References: <541739B5.4070103@gmx.com> <20140915224224.71bed7bf@meilong>
 <20140915211606.GB4565@torproject.org>
MIME-Version: 1.0
In-Reply-To: <20140915211606.GB4565@torproject.org>
X-GPG-Public-Key-URL: https://blog.patternsinthevoid.net/isis.txt
X-Louis-Lingg: In this hope do I say to you I despise you. I despise your
 order, your laws, your force-propped authority. Hang me for it!
Subject: Re: [tor-talk] more sites requiring captchas from Cloudfare (using
 Google API?)
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============9111746979153402846=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>


--===============9111746979153402846==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="H14uD12u8nekTETJ"
Content-Disposition: inline


--H14uD12u8nekTETJ
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Mike Perry transcribed 3.6K bytes:
> I think the next step here is to try to gather a list of cloudflare
> customers we suspect to be Tor friendly, and have them politely request
> that their Tor users not be discriminated in this way, and failing that,
> publicly leave Cloudflare for a competing ISP. I think pushback
> from actual CloudFlare customers will carry far more weight here than
> pushback from the Tor Project or the EFF. It also makes zero sense for
> CloudFlare to serve Tor users captchas at all if their customers are the
> ones paying the hosting bills and are happy to serve Tor users.=20

+1=20

However, I don't know of a competitor to Cloudflare who privides free (as in
beer) (D)DoS-protection via reverse webproxies, not to mention all the other
bells and whistles which Cloudflare offers. It'll be hard to make the argum=
ent
to switch for user-privacy reasons, given the seeming lack of marketed
alternatives.

Can anyone recommend a comparable alternative to Cloudflare?


> For my part, I've noticed that nearly all of the Bitcoin web
> infrastructure is hosted on Cloudflare. Surely some of those people
> might be willing to speak up for us.=20
>=20

I have considered starting an outreach effort to speak to the maintainers of
some of these sites, with the idea that I might gather sympathy from certain
communities who use Cloudflare.

For example, as you mentioned, the Bitcoin community, which I have personal=
ly
noticed while having discussions with some of the core bitcoin developers, =
who
pointed me to various bits of Bitcoin documentation... which I was
frustratingly unable to access due to an infinite CAPTCHA loop from
Cloudflare. The core Bitcoin developers, from my experience, are all extrem=
ely
well-informed about Tor and related privacy and security issues. I would gu=
ess
that they are likely using Cloudflare primarily as a mechanism to decrease =
the
attack surface of their sites, and probably are already aware (or would be
upset to learn) that Cloudflare sometimes prevents Tor users from accessing
the content entirely.


> Has anyone else noticed Cloudflare captchas on sites that they would
> otherwise expect to be run by Tor-friendly entities?
>=20

Here's the beginnings of your list. Others should feel free to amend.

Possibly-Tor-sympathetic sites which use Cloudflare:
----------------------------------------------------
 * [The Bitcoin Wiki](https://en.bitcoin.it)
 * [Open Tech Fund](https://www.opentechfund.org/)


--=20
 =E2=99=A5=E2=92=B6 isis agora lovecruft
_________________________________________________________
GPG: 4096R/A3ADB67A2CDB8B35
Current Keys: https://blog.patternsinthevoid.net/isis.txt

--H14uD12u8nekTETJ
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----

iQMhBAEBCgELBQJUF8bsBYMB4TOAVhSAAAAAACUAKGlzaXMrc2lnbnN1YmtleUBw
YXR0ZXJuc2ludGhldm9pZC5uZXRDMkYwMzNBNjFEMDAxQjU1MjE4NTVBOUUxOEMx
NkVDNUY5RjFENjczSxSAAAAAABoAKGlzaXNAcGF0dGVybnNpbnRoZXZvaWQubmV0
MEE2QTU4QTE0QjU5NDZBQkRFMThFMjA3QTNBREI2N0EyQ0RCOEIzNS4aaHR0cHM6
Ly9ibG9nLnBhdHRlcm5zaW50aGV2b2lkLm5ldC9wb2xpY3kudHh0LJhodHRwczov
L2Jsb2cucGF0dGVybnNpbnRoZXZvaWQubmV0L2lzaXMudHh0AAoJEBjBbsX58dZz
AhwP/RZ8dmAm2Q+wAtplp2tPNaph5iHADOJN7cuK5OVR55WJ35iUU8wExP7/G0Ea
pL32aIJwa9DZbiilwDkpoatfk1XLEJBi87b/WIv40MAjseNrClJ9uPddkOfnipqW
OeJmXvPyuo06Os+p8l6o2NG0YOefH2FsbKTjzmJntnBu1E7V3AP1ta9WTC8qD3gd
92lqX31ULiEPBAqxomG5bpu/AOI8McbebQSKSnflHPyoq35gBRZB/M7NxkHIr1OB
lIaGl8kYcJQqLeybBkH7s8FtazdpHyvyJfkJiNieUZREzFd9xyd1uFUCRfzqDO4o
1XRw7/hGSPVi50wCI9K1BjNisdLq0xACLd4K2xOGEWQDk+ccNOnukg453eA9nFyo
vBcN7BuwQp9BtOgWez5Q2OFxLt2XpXelyyf1irro4uDGqOQ3fIoH0xaHlcpFKu5q
ZmDvOM9z0K2y6asy1QU+2Indd7Oc0NFtNl+dOS8PN5XtNJATOEJajwYo9A12lUIT
6gim/d3wMcJsIA5VIZXdqk5rklV+YPV1OY53+aHdTga5w0yno3FFUan1CbA22Zyb
acQ8K8w+nT/aQcmS/J3DD/vv6XXXPj5ssnIsCRq2e4Qd2lOw2QWaZqvvANovAGIv
g5TheQwnNtVyCEYx/iDUDKdKEV4tWM8VqRExXTHMW0Ve79o1
=lrok
-----END PGP SIGNATURE-----

--H14uD12u8nekTETJ--

--===============9111746979153402846==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============9111746979153402846==--

