Live data from Hacker News

Warp – Mobile VPN

blog.cloudflare.com

321–330 of 500 posts

Re: Warp – Mobile VPN

#321
post #253

Earlier quoted context omitted.

Is this in X-Forwarded-For?

CF-Connecting-IP is what we recommend using. See https://support.cloudflare.com/hc/en-us/articles/200170986-H... for details.

Which presumably only works if your site is using Cloudflare? Since you wouldn't be MITMing SSL in order to inject this header?

Re: Warp – Mobile VPN

#322
post #284

>TCP, the foundational protocol of the Internet, was never designed for a mobile environment. Amusingly, this is actually not true. TCP was originally developed to run on an inter-network over two networks: the ARPANET which has the reliability characteristics of a "traditional" network, and an extremely mobile network with lots of packet loss: ship-to-ship packet radio. TCP today seems very poorly suited for the mob…

In fact, I'd argue that it is a good fit even today. What wasn't designed for mobile is the Http protocol. HTTP2 solves most of the problems with mobile without changing out TCP. QUIC provides a few benefits, but by and large not many.

BTW, HTTP3 is actually mostly QUIC (or rather "HTTP-over-QUIC").

https://en.wikipedia.org/wiki/HTTP/3

Re: Warp – Mobile VPN

#323
post #241

193 Comments and No one has asked yet. How do they make money? So, the price plan and extras from Business, Professional and Enterprise CDN is enough to cover all the cost of running the network + free tier CDN + Domain Registration Operation + DNS + Free tier VPN? There is a reason why I am using Apple. Their interest is in me using iPhone or Apple devices with a very decent profits margin, and hopefully up sell me…

194 comments, and someone didn't read the article

Yes I read it, I am just not convinced it is financially feasible, or sustainable. Freemium models works in Gaming when 1% of players are paying in millions, a factor of 100s of thousands more than lowest paying member. And I don't understand why their model would work.

Re: Warp – Mobile VPN

#324
post #236

Earlier quoted context omitted.

Cloudflare pushed out free TLS years before Let's Encrypt and we are actively working on and supporting QUIC and HTTP/3. But QUIC/HTTP/3 aren't here today, not everyone is using HTTPS and there are other worries in coffee shops etc. hence a VPN service makes sense.

There is a bit of a difference between LetsEncrypt and Cloudflare TLS termination though... one is TLS for everyone, the other is TLS for Cloudflare customers (paying or not). For instance can an Iranian website use Cloudflare TLS? I would wager not. (ironic as they probably need secure transport the most). I'm not saying Cloudflare isn't doing good things for the Internet but it's a bit disingenuous to equate the 2…

CF is at the mercy of the CAs (DigiCert/Comodo), and at least based on LetsEncrypt's stance [0], they should be OK to issue .ir certificates as long as the customer is not a Gov't entity. The only issue is that these CA's are just playing it safe by not issuing any .ir domains, making CF also unable to issue .ir.

I believe CF is working on LetsEncrypt certificates, at least based on letsencrypt.org being included in the 'automatic' CAA records[1].

0: https://community.letsencrypt.org/t/issuance-criteria-for-ir...

1: https://support.cloudflare.com/hc/en-us/articles/11500031083...

Re: Warp – Mobile VPN

#326
How does this play with various arbitrary geoip blocks that various video on demand sites deploy ? Cloudflare being a large enough player has enough clout to affect some of these regressive practices (which I consider to be a violation of net-neutrality; a form of ip discrimination if you will). Yet, I feel that it will have the opposite effect, in that cloudflare will get whitelisted somehow much to the disadvantage of other vpn providers.

Re: Warp – Mobile VPN

#327

There goes me and my co-founder's plan of disrupting the Mobile VPN market. Or may be, we still have a chance? Anywho, congratulations Cloudflare! I long held an opinion that the VPN market was ripe for disruption when I looked at privacy policy of some of the top players. Having analysed the market, I find that its defragmented with no clear run-away winner. I hope you're able to make a headway with all the interest…

Email me: matthewatcloudflaredotcom. Perhaps you and your cofounder can help build your vision within Cloudflare? I'd love to chat.

Very cool response!

Re: Warp – Mobile VPN

#328

Earlier quoted context omitted.

> So basically Cloudflare created an app with Cloudflare branding and set up a Wireguard server for everyone. Not just one -- servers in 175 (and growing) locations spread around the world, and the app will always use the closest one to you. That's arguably a lot more important that what protocol it uses, and is not something you could easily DIY.

I mean, for DIY you only need one because you're only one user . Pick a VPS host with a data center near you... done.

sometimes people move around

Re: Warp – Mobile VPN

#329
VPNs are "trust me" security, and Cloudflare certainly has a better reputation than many VPN services, so, in that regard, Cloudflare's entry is welcome, but...

I've been using Tor as a privacy-friendly VPN, so Cloudflare getting into this business will make it feel a bit different, every time I see an error Web page that says Cloudflare is blocking a Tor exit node from viewing a page that Cloudflare hosts.

Perhaps Cloudflare could figure out how to block competitor Tor less (even if there's abuse coming in through Tor)? That might be difficult, but an excellent show of good faith.

Re: Warp – Mobile VPN

#330
post #286

There goes me and my co-founder's plan of disrupting the Mobile VPN market. Or may be, we still have a chance? Anywho, congratulations Cloudflare! I long held an opinion that the VPN market was ripe for disruption when I looked at privacy policy of some of the top players. Having analysed the market, I find that its defragmented with no clear run-away winner. I hope you're able to make a headway with all the interest…

My biggest concern with any VPN is: do I trust you? I’ve been reluctant to sign up with any of these VPN services that seem to be advertising everywhere nowadays because I don’t know what they’ll do with my internet traffic. The CloudFlare VPN is interesting to me because they’re a large, established company with a good reputation, so I trust them more than TunnelBear or ExpressVPN or PIA or whoever’s sponsoring YouT…

One positive for PIA at least is that their "no logs"-policy actually has been proven multiple times by subpoenas. https://torrentfreak.com/vpn-providers-no-logging-claims-tes...

I'm not aware of any subpoenas directed at Cloudflare that was equally as useless.

Post reply on HN