Consumer Rights Wiki

Cloudflare: Difference between revisions

← Older editNewer edit →
VisualWikitext
Sojourna (talk | contribs)
Autoconfirmed users, confirmed
3,441 edits
mNo edit summary
Spectr3 (talk | contribs)
confirmed
2 edits
m Removed a misinterpreted Anti-Consumer practice as the password validation is an opt-in feature webmasters can chose to enable https://developers.cloudflare.com/waf/detections/leaked-credentials/?cf_target_id=C7588C7FC4D2E9CABD5A8B8CD09DD547 also added a screenshot of the domain registration warning to enforce the lock-in page.
Line 17: Line 17:
==Anti-consumer practices==
==Anti-consumer practices==


===Password scanning of website visitors===
===DNS Lock-In===
From September to November 2024 Cloudflare was scanning the passwords users entered on websites without obtaining the users' consent.<ref>{{Cite web |last=Radwan |first=Radwa |last2=Zejnilovic |first2=Sabina |date=17 Mar 2025 |title=Password reuse is rampant: nearly half of observed user logins are compromised |url=https://blog.cloudflare.com/password-reuse-rampant-half-user-logins-compromised/ |url-status=live |access-date=10 Apr 2025 |website=Cloudflare Blog}}</ref>
Cloudflare offers a registrar, their domain registration page and TOS warns you must use Cloudflares DNS service with your domain.<ref>{{Cite web |date=2025-07-25 |title=Domain Registration Agreement {{!}} Cloudflare |url=https://www.cloudflare.com/domain-registration-agreement/ |url-status=live |access-date=2025-11-11}}</ref> The only workaround is transfering to different registrar or subscribing to a paid business plan. <ref>{{Cite web |date=25 Jul 2024 |title=Cloudflare locks you into their NS if you use them as registrar. I can't believe I didn't notice this before.  |url=https://www.reddit.com/r/sysadmin/comments/1ebzxq4/cloudflare_locks_you_into_their_ns_if_you_use/ |url-status=live |access-date=17 Apr 2025 |website=Reddit}}</ref>
[[File:Registration Page.png|left|thumb]]
 
 
 
 
 


===Upselling behaviors===
{{Main|Cloudflare forces consumers onto higher tiers with threats of shutdowns}}
The company has taken part in concerning upselling behaviours for its hosting services. For example Cloudflare advertises "low-cost domain names with no extra fees", however you can't change nameservers of your domain without paid business plan. <ref>{{Cite web |date=25 Jul 2024 |title=Cloudflare locks you into their NS if you use them as registrar. I can't believe I didn't notice this before.  |url=https://www.reddit.com/r/sysadmin/comments/1ebzxq4/cloudflare_locks_you_into_their_ns_if_you_use/ |url-status=live |access-date=17 Apr 2025 |website=Reddit}}</ref>


===Forced ID theft and face recognition<!-- NEEDS more refs covering this incident -->===
===Forced ID theft and face recognition<!-- NEEDS more refs covering this incident -->===
Retrieved from "https://mirror.consumerrights.wiki/w/Cloudflare"