Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Cloudflare WARP is an easy-to-use free VPN which protects your IP address from businesses who haven't paid Cloudflare yet.

Companies like InfoUSA can convert 95% of US IP addresses to physical addresses and household resident names. By inserting themselves in the network between users and websites, Cloudflare will soon be able to get a chunk of InfoUSA's advertising profits.

Remember, if you aren't paying for it then you are the product.

Stay away from Cloudflare WARP and use a real VPN.



FTA:

> What WARP Is Not

> From a technical perspective, WARP is a VPN. But it is designed for a very different audience than a traditional VPN. WARP is not designed to allow you to access geo-restricted content when you’re traveling. It will not hide your IP address from the websites you visit. If you’re looking for that kind of high-security protection then a traditional VPN or a service like Tor are likely better choices for you.


Then what does it do?

> WARP, instead, is built for the average consumer. It’s built to ensure that your data is secured while it’s in transit. So the networks between you and the applications you’re using can’t spy on you.

Isn't that what ssl does already lol? What a load of sham.


SSL/TLS encrypts your traffic between you and a server but by itself doesn't prevent your ISP from snooping some information about your encrypted connection. If you aren't using Secure DNS & DNSSEC, they may be able to see and intercept your DNS queries. If you don't use TLS 1.3, they can see the SSL certificate of the website you are connecting to. If you don't encrypt your Server Name Indication (SNI), they can see the hostname of the server you are connecting to.

This all allows your ISP to figure out which websites you are connecting to and this can be used to prevent you from accessing certain websites, sell your browsing history to an advertising agency, etc.

You can read more about it here: https://www.cloudflare.com/ssl/encrypted-sni/

P.S. I don't work for Cloudflare.


All that to hide hostnames from your ISP? Again, what a load of sham.


> Then what does it do?

From my limited guess, you dial into Cloudflare's intranet, access CDN'd content inside a giant & very fast NAT.


“Use a real VPN” is actually pretty hard for a random user: there are constant ads for VON services that turn out to not protect their users’ traffic, and/or harvest and sell their users traffic, and yet are harder to use and more expensive.

Just like how “but they can see your email” isn’t enough of a deterrent to convince the majority of people to switch from free gmail (hotmail, yahoo, etc.) to a paid service with actual privacy, “Cloudflare can see your traffic” is unlikely to convince people who are more worried about nebulous sniffers and scammers at their local coffee shops than giant internet infrastructure companies.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: