Privacy Week

As we start planning our 2022 Innovation Weeks, we are reflecting back on the highlights from each of these weeks

Reagan Russell, John Graham-Cumming, and Val Vesa

As part of Cloudflare’s recent Privacy Week we hosted a series of fireside chats on security, privacy, and compliance. Many of these conversations touched on the intricate legal debate being held in Europe around data sovereignty. Here are some of the highlights.

Jason Kincaid

In case you missed any of the blog posts this week addressing the topics of Privacy and Compliance, you’ll find a summary below.

Val Vesa

Allowing logging for payloads that trigger the Web Application Firewall has always led to end-user privacy concerns. We built encrypted matched payload logging to solve this!

Michael Tremante

Running a global network that complies with different privacy laws around the world requires coming back to the values that we have championed since our founding.

Alissa Starzak

As quantum computing matures, R&D efforts in cryptography are keeping pace. We’re working with academia and industry peers to create new cryptography standards resilient to quantum computer attacks.

Nick Sullivan

Workplace Records uses Access and Gateway logs to provide the state and country from which employees are working. Workplace Records can be used to help finance, legal, and HR departments determine where payroll taxes are due and provide a record to defend those decisions.

Matthew Prince and Sam Rhea

We think trust is fundamental to building a better Internet. Cloudflare adheres to industry-standard security compliance certifications and regulations to help our customers earn their users’ trust.

Ling Wu

Anyone can now sign up to use Cloudflare’s new privacy-first Web Analytics -- even without changing your DNS settings.

Jon Levine

Cloudflare is deprecating the __cfduid cookie. While we have never tracked end-users across sites or sell their personal data, we don’t want any customer to think they need a cookie banner because of what we do.

Sergi Isasi

A deep dive into the Encrypted Client Hello, a standard that encrypts privacy-sensitive parameters sent by the client, as part of the TLS handshake.

Christopher Patton

Imagine passwords for online services that never leave your device, encrypted or otherwise. OPAQUE is a new cryptographic protocol that makes this idea possible, giving you and only you full control of your password.

Tatiana Bradley

Oblivious DoH (ODoH) makes secure DNS over HTTPS (DoH) queries into private queries which prevent the leakage of client IP addresses to resolvers. The new proposed ODoH standard addresses this problem and today we are enabling users to use this protocol with 1.1.1.1

Tanya Verma and Sudheesh Singanamalla

Today, we’re making several announcements around improving Internet protocols with respect to something important to our customers and Internet users worldwide: privacy.

Nick Sullivan

The Internet was not built for privacy. Welcome to Phase 3 of the Internet: always on, always secure, always private.

John Graham-Cumming

The Data Localization Suite helps businesses get the performance and security benefits of Cloudflare’s global network while making it easy to set rules and controls at the edge about where their data is stored and protected.

John Graham-Cumming

Over the course of the week, we'll be announcing ways that our customers can use our service in order to ensure they are in compliance with an increasingly complicated set of rules and laws around the world.

Matthew Prince