this post was submitted on 23 Dec 2025
73 points (95.1% liked)
Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ
65950 readers
474 users here now
⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.
Rules • Full Version
1. Posts must be related to the discussion of digital piracy
2. Don't request invites, trade, sell, or self-promote
3. Don't request or link to specific pirated titles, including DMs
4. Don't submit low-quality posts, be entitled, or harass others
Loot, Pillage, & Plunder
📜 c/Piracy Wiki (Community Edition):
🏴☠️ Other communities
FUCK ADOBE!
Torrenting/P2P:
- !seedboxes@lemmy.dbzer0.com
- !trackers@lemmy.dbzer0.com
- !qbittorrent@lemmy.dbzer0.com
- !libretorrent@lemmy.dbzer0.com
- !soulseek@lemmy.dbzer0.com
Gaming:
- !steamdeckpirates@lemmy.dbzer0.com
- !newyuzupiracy@lemmy.dbzer0.com
- !switchpirates@lemmy.dbzer0.com
- !3dspiracy@lemmy.dbzer0.com
- !retropirates@lemmy.dbzer0.com
💰 Please help cover server costs.
![]() |
![]() |
|---|---|
| Ko-fi | Liberapay |
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments



That seems way beyond my threat model, but maybe I don't fully understand the risks.
Cloudflare cannot track visitors of my website, the only malicious thing they can do is to tamper with my DNS record. While they are almost surely an intelligence asset, that would greatly damage their reputation for negligible gain (my website is a static site with like 2 visitors including me).
Am I correct, or did I miss something? I don't have an email address on my domain, so that's ok.
Yes, cloudflare will not tamper with your record because you are not important enough to be worth the reputation loss. Realistically, no harm will come to you from cloudflare.
However! They are still the party that could theoretically cause the largest amount of damage to both you and your users.
They "cannot" only because they say so. Changing your DNS record allows them to read 100% of all incoming traffic even if it is TLS encrypted (because they can acquire a valid TLS certificate for your domain through a DNS challenge).
Thanks. I'm aware of the theoretical risks and how bad cloudflare is for the internet as a whole. Sadly, I use Cloudflare tunnels for a different subdomain. While I would like to move to some alternative in the long term, it just works™ right now and I don't really have the energy to touch it.