[tor-bugs] #24351 [Applications/Tor Browser]: Block Global Active Adversary Cloudflare

[Tor Bug Tracker & Wiki]

#24351: Block Global Active Adversary Cloudflare
-------------------------------------------------+-------------------------
 Reporter:  nullius                              |          Owner:
                                                 |  cypherpunks
     Type:  enhancement                          |         Status:
                                                 |  assigned
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Major                                |     Resolution:
 Keywords:  security, privacy, anonymity, mitm,  |  Actual Points:
  cloudflare                                     |
Parent ID:  #18361                               |         Points:  1000
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by cypherpunks):

 Replying to [comment:113 cypherpunks]:
 > Replying to [comment:112 cypherpunks]:
 > > One thing I don't like Tor project is they are COMPLETELY ignoring
 this issue.
 > And for good reasons, since it's unreasonable, if you block Cloudflare
 you end up blocking half the Internet, hence you have less users. It will
 be a complete disaster.
 cursed. are you an cloudflare employee?

 Cloudflare blocking me from time to time on daily basis and MiTM my whole
 traffic by decrypting    my banking website, cryptocurrency exchange
 website, dating website, Onlineshops websites, computer forum boards, news
 website, torrent websites, software repository,  some (in my country )
 illegal streaming website - all this even while using Tor Browser. No way
 to stop them gather and collect all of my traffic in plaintext. Which the
 browsers say, "site is secure https end-to-end encryption". Nothing
 mentioning about this MiTM eavesdropper Cloudflare. It's a real serious
 and large security problematic, everyone must not and can't simply
 stupidly ignore. (like: "i got nothing to hide") why not posting your
 MiTM'ed banking sites transactions oublic on internets? It's the same.
 nothing is hidden anymore. Cloudflare knows everything about you, from the
 position they are into now and still getting accelerate worse everyday.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24351#comment:117>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online