Cloudflare has huge legal liabilities because it (re)hosts content for "denied entities" ("terrorists"). This is usually enough to kill a US company dead & it is somewhat odd US DoJ has not yet acted on this. It already has big implications for the internet at large though. 1/5
Since Cloudflare is obviously in potential hot water with the US government, something that is especially bad if you are heading for an IPO, they will have vital interest in anything that makes this issue go away. So, what does Cloudflare have on offer to fix their problem? 2/5 
Most of the data hosted by Cloudflare consists of public websites. However, over the past year, the company has been trying very hard to get the Firefox browser to send it the name of each and every website a user visits, ostensibly because this enhances your privacy (?!) 3/5
Firefox intends to turn "trusted" lookup on BY DEFAULT for everyone, giving Cloudflare a copy of the world's browsing traffic. They promise to safeguard this data. But what if the US DoJ or NSA shows up & asks for a copy & promises the "terrorist support" issue gets settled? 4/5
Resisting government demands for data is hard at the best of times. It is INCREDIBLY hard if a company is already in hot water with that government. So before clicking 'OK, Got it!' when your browser asks you to hand over its DNS to @cloudflare! 5/5
blog.powerdns.com/2018/09/04/on-…
blog.powerdns.com/2018/09/04/on-…
Bonus: background on "DNS over HTTPS" can be found on blog.powerdns.com/2018/09/04/on-…
I of course meant "So think twice before clicking 'OK, Got it!'" when asked to move your DNS to Cloudflare!
