Mon, Feb 10, 2025Will Hackett

Tinfoil hat moment this evening, could Cloudflare be a NSA front?

This isn't the first time I've thought about this - I think perhaps it's cropped up in my mind a few times over the past decade.

The gist of it is that Cloudflare's a company offering free services to help keep websites online and save bandwidth. They're a CDN, a DDoS protection service, and a reverse proxy. They're also a DNS provider. Oh, and they issue SSL certificates.

They've got cloudflared routing within our private networks and 1.1.1.1 to resolve our DNS queries. They're everywhere.

So, are they the NSA?

Probably not, but wouldn't that be a great cover?

Issue certificates, proxy traffic and provide DNS. They're on all sides to be the perfect, unsuspecting middleman.

Disclaimer: This website is hosted entirely by Cloudflare.

About the Author

Will Hackett

CTO at Flowstate, building thoughtful AI products. Previously co-founded Pragmatic and Pactio, and led engineering teams at Blinq and Linktree. Passionate about distributed systems, product engineering, and helping teams ship great software.