CloudflareNextSteps

Who is affected?

1. Tor Browser users
2. OONI/Onion Browser/Orfox
3. VPNs
4. countries in Africa/Asia

Areas for possible solutions

technical ones:

• token extension (could work for OONI, too, if the CAPTCHA solution gets outsourced to your phone)
• tor-in-the-box (see [blocking session in the working sessions 2])
• for OONI: machine-readable header "I am Cloudflare"

non-technical ones:

• we need to be aware of our language ("challenge" and not "censor")
• convince them to stop using IP reputation only
• convince Cloudflare customer to not block Tor
• story-telling to Cloudflare executives