Cloudflare: Difference between revisions
mNo edit summary |
SinexTitan (talk | contribs) restoration to a brand article |
||
| (19 intermediate revisions by 14 users not shown) | |||
| Line 1: | Line 1: | ||
{{Incomplete}} | {{Incomplete}} | ||
== | {{CompanyCargo | ||
|Description=American technology company known for its content delivery network, DNS services, DDOS filtering, and domain registrar. | |||
|Founded=2009 | |||
|Industry=Information Technology, Web Services | |||
|Logo=Cloudflare logo.svg | |||
|ParentCompany= | |||
|Type=Public | |||
|Website=https://www.cloudflare.com/ | |||
}} | |||
'''{{Wplink|Cloudflare|Cloudflare, Inc.}}''' is an American company that offers a wide range of web services. Due to its widespread adoption, Cloudflare's services play a critical role in the modern web infrastructure. | |||
==Consumer impact summary== | |||
{{Ph-C-CIS}} | |||
==Incidents== | |||
===DNS Lock-In=== | |||
Cloudflare offers a registrar, their domain registration page and TOS warns you must use Cloudflares DNS service with your domain.<ref>{{Cite web |date=2025-07-25 |title=Domain Registration Agreement - Cloudflare |url=https://www.cloudflare.com/domain-registration-agreement/ |url-status=live |archive-url=http://web.archive.org/web/20260208034425/https://www.cloudflare.com/domain-registration-agreement/ |archive-date=8 Feb 2026 |access-date=2025-11-11 |website=[[Cloudflare]]}}</ref> The only workaround is transferring to different registrar or subscribing to a paid business plan. <ref>{{Cite web |date=25 Jul 2024 |title=Cloudflare locks you into their NS if you use them as registrar. I can't believe I didn't notice this before. |url=https://old.reddit.com/r/sysadmin/comments/1ebzxq4/cloudflare_locks_you_into_their_ns_if_you_use/ |url-status=live |access-date=17 Apr 2025 |website=[[Reddit]] |archive-url=http://web.archive.org/web/20240726053953/https://old.reddit.com/r/sysadmin/comments/1ebzxq4/cloudflare_locks_you_into_their_ns_if_you_use/ |archive-date=26 Jul 2024}}</ref> | |||
[[File:Cloudflare registration page.png|right|thumb|Cloudflare's registration page warning about the DNS restriction.]] | |||
===Forced ID theft and face recognition=== | |||
<!-- NEEDS more refs covering this incident --> | |||
A full day after the sale of domain names, Cloudflare sends the customer a demand to present an ID card and their face in an automated video call with the third party Stripe within 24 hours to be analyzed by a face recognition system, threatening to cancel the sale unless the customer fulfills this requirement that the customer was not informed about before the sale, thereby making the domain names available for squatters to grab. The customer can lose their domain names either by simply not checking their email for 24 hours, which is likely as the sale has already completed and the customer has no reason to check their email again, or by the customer not agreeing to the procedure, which the customer should not, as ID cards are not made for use online. The customer's bank already has a procedure for verifying online purchases by popping up the bank app that has already been verified by visiting the bank in person, showing an ID card to a real person and signing a paper by hand. Stripe could have done like everyone else and delegate the procedure to the bank instead of inventing their own. | A full day after the sale of domain names, Cloudflare sends the customer a demand to present an ID card and their face in an automated video call with the third party Stripe within 24 hours to be analyzed by a face recognition system, threatening to cancel the sale unless the customer fulfills this requirement that the customer was not informed about before the sale, thereby making the domain names available for squatters to grab. The customer can lose their domain names either by simply not checking their email for 24 hours, which is likely as the sale has already completed and the customer has no reason to check their email again, or by the customer not agreeing to the procedure, which the customer should not, as ID cards are not made for use online. The customer's bank already has a procedure for verifying online purchases by popping up the bank app that has already been verified by visiting the bank in person, showing an ID card to a real person and signing a paper by hand. Stripe could have done like everyone else and delegate the procedure to the bank instead of inventing their own. | ||
| Line 15: | Line 35: | ||
</gallery> | </gallery> | ||
[[Category: | ==Products== | ||
[[Category: | {{Ph-C-P}} | ||
==See also== | |||
{{Ph-C-SA}} | |||
==References== | |||
{{Reflist}} | |||
[[Category:{{PAGENAME}}]] | |||
[[Category:Cybersecurity companies]] | |||