cloudflare-tor/what-to-do.md

What you can do to resist Cloudflare?

Website consumer

• If the website you like is using Cloudflare, tell them not to use Cloudflare.

You are just helping corporate censorship and mass surveillance. https://trac.torproject.org/projects/tor/ticket/24351

• Try not to use their service. Remember you are being watched by Cloudflare.

• Search for other website. There are many alternatives and opportunites on the internet!

• If your browser is Firefox, use Block Cloudflare MITM Attack add-on. Other alternatives are Searxes' Third-party Request Blocker(can block Cloudflare) and Detect Cloudflare(notify only).

• Convince your friends to use Tor Browser on the daily basis. Anonymity should be the standard of the open internet!

Website owner / Web developer

• Do not use Cloudflare solution. You are loser if you fall to that easy solution. You can do better than that, right?

• Install Web Application Firewall and Fail2Ban on your server and configure it properly.

• Set up Tor Onion Service if you believe in freedom and welcome anonymous users.

• Ask for advice from other Clearnet/Tor dual website operators and make anonymous friends! :)

Software user

• If you use Debian GNU/Linux, or any derivative, subscribe to bug #831835. And if you can, help verify the patch, and help the maintainer come to the right conclusion on whether it should be accepted.

• Always recommend Tor Browser for desktop and Orfox for smartphone. Other software's privacy is JUST A ILLUSION.

Let's talk about other software's privacy...

• If you really need to use Firefox, pick "Firefox ESR". ESR is developed for company and organizations, thus some spyware code is disabled by default. Portable version is here.

• Remember, Mozilla is using Cloudflare service. They're also using Cloudflare's DNS service on their product D'oh!

• Mozilla officially rejected this ticket.

• PaleMoon developer likes Cloudflare.

• Chrome is a spyware.

Action

• Tell others around you about the dangers of Cloudflare.

• Help improve this repository, both the lists, the arguments against it and the details.

• Document and make very public where things go wrong with Cloudflare (and similar companies), making sure to mention this repository when you do so

• Get more people using Tor by default so they can experience the web from the perspective of different parts of the world.

• Start groups, in social media and meatspace, dedicated to liberating the world from Cloudflare.

• Where appropriate, link to these groups on this repository - this can be a place for coordinating working together as groups.

• Start a coop that can provide a meaningful non corporate alternative to Cloudflare.

• Let us know of any alternatives to help at least provide multiple layered defence against Cloudflare.

• Try using globalist to maintain this list.

• If you are in the United States of America and the website in question is a bank or an accountant, try to bring legal pressure under the Gramm–Leach–Bliley Act and report back to us how far you get.

• If the website is a government site, try to bring legal pressure under the 1st Amendment of the US Constitution.

• If you are EU citizen, contact the website to send your personal information under the General Data Protection Regulation. If they refuse to give you your information, that's a violation of the law.

• For companies that claim to offer service on their website try reporting them as "false advertising" to consumer protection organizations and BBB.