51–60 of 473 posts
I know cloudflare is not to blame here, but they provide way easy access to blocking to bad admins.
I've had the exact same problem for a while. Here are some of the sites I've been unable to access (found by searching for "just a moment" in my browser history): - https://gitlab.com/users/sign_in - https://steamdb.info/login/ - https://www.zabbix.com/forum/ - https://casetext.com/ - https://namemc.com/login - https://spinroot.com/ - https://camelcamelcamel.com/ It's really annoying and Cloudflare is apparently doin…
Earlier quoted context omitted.
That's not going to be enough to pass Cloudflare.
Based on what? https://developers.cloudflare.com/support/troubleshooting/ge...
https://radar.cloudflare.com/traffic/verified-bots
https://blog.cloudflare.com/friendly-bots/
> At Cloudflare, we manually “verify” good bots, so they don’t get blocked.
> Worse yet, I know that Cloudflare knows I have those certificates. Why? Because it asked for them! It doesn’t make sense for Cloudflare to request any client certificates. I think there are real bugs somewhere.
https://developers.cloudflare.com/ssl/client-certificates/en...
https://developers.cloudflare.com/cloudflare-one/identity/de...
This would then require Cloudflare to request a client certificate. This is great for securing websites using corporate identity that is derived from AD certs for example to make sure the device being used has a valid cert on it.
Alongside MDM for example forcing the certificate to have a short lifespan (my $CORP uses 7 days) you can validate that the device has the correct security posture to access the resources.
If for example I let my device not update the version of macOS often enough my cert expires and I can't access internal resources until I update my OS and MDM software checks that and provisions me a new device certificate.
Any time a large portion of internet traffic is controlled by a single source it brings problems like this with it. All cloudflare has to do is arbitrarily decide who and who can't use the internet and effectively their word becomes law. Like most things it starts with an innocent premise (e.g. "an easy way to stop bad actors") and ends up extended to any number of arbitrary things. Worse, the argument from privacy a…
Only if Cloudflare stops you moving to a competitor.
I've had the exact same problem for a while. Here are some of the sites I've been unable to access (found by searching for "just a moment" in my browser history): - https://gitlab.com/users/sign_in - https://steamdb.info/login/ - https://www.zabbix.com/forum/ - https://casetext.com/ - https://namemc.com/login - https://spinroot.com/ - https://camelcamelcamel.com/ It's really annoying and Cloudflare is apparently doin…
> The next day, I tried accessing a web page internal to my company… […] I couldn’t get past a security check page because of issues in Cloudflare’s software. […] The silliness of it all is that I was on my work device the whole time, which was behind my workplace VPN. This seems more like an "IT department gone mad" problem than a Cloudflare problem. I'm surprised they'd rather switch to Chrome than submit a support…
Users in Egypt are unable to visit my Fitness website https://musclewiki.com Cloudflare is a huge part of the internet. Often they won't respond and it appears that for whatever reason, their IP range is blocked in Egypt. We probably get 10 support emails per week. I contacted Cloudflare and they simply said there is nothing they can do.
If you don’t want to stop using CloudFlare or need a temporary solution ask your users from Egypt to use VPN- many already do as they come across similar problems for other services
Blocking cloudflare ip addresses means that half of the internet wouldn't be accessible from Egypt. its closw to blocking port 443 because some people use DNS over https.
disclaimer: I'm Egyptian living in the US.
> Worse yet, I know that Cloudflare knows I have those certificates. Why? Because it asked for them! It doesn’t make sense for Cloudflare to request any client certificates. I think there are real bugs somewhere.