The cause of the problem is that your software is faulty by design.
1. IP addresses are to be used for packet routing. Certainly not for assigning
"behavior scores" to users in the background. IP addresses say nothing about
your visitors, my IP address could have been a complete stranger's IP
address yesterday.
2. Deciding who can access half the web based on their TLS signature achieves
nothing in the long run except reinforce browser monopolies, and goes
completely against the spirit of the open web.
I guess now I have to use Chrome for browsing the web from home. Yes, I do
run a crawler-like bot as a hobby project, I got what I was asking for.
(Funnily enough, it still works if I just emulate Chrome's TLS signature). But
I also have friends who have done absolutely nothing of sorts (no technical
skills), and still got caught up in this latest ban wave.
Let's be honest here. Your service has likely caused millions of people
harm who one day to the other are suddenly blocked from half the WWW -
not just nerds, who can get around that one way or the other, real users
who just got unlucky and now are potentially blocked from accessing websites
required for their daily lives (welcome to the 21th century). This is not
a one time problem, it has been going on for years; this time it just came
too suddenly for too many people. And this kind of harm is a logical conclusion
to the heuristics you use for determining who can view a website.
Never mind that it's ridiculous how a single company from outside my country
has the power to decide on whether I can use the web or not. That's kind of
on website owners unconditionally giving this power to CF anyway.
Now, allow me to return to purchasing proxies from shady sources for myself,
so I can keep using Firefox. Thanks and keep up the good work.