Research Directions in Password Security
2021-10-14
We've been studying password problems, including malicious logins using compromised credentials. Here's what we learned and here's where we think we can go from here with safer password systems....
Cloudflare and the IETF
2021-10-13
Cloudflare helps build a better Internet through collaboration on open and interoperable standards. This post will describe how Cloudflare contributes to the standardization process to enable incremental innovation and drive long-term architectural change....
Pairings in CIRCL
2021-10-13
Our Go cryptographic library CIRCL announces support for pairing-based cryptography....
Exported Authenticators: The long road to RFC
2021-10-13
Learn more about Exported Authenticators, a new extension to TLS, currently going through the IETF standardisation process....
Coalescing Connections to Improve Network Privacy and Performance
2021-10-13
Real world experiments for evaluating connection coalescing effects....
Introducing SSL/TLS Recommender
2021-10-12
Introducing customized recommendations to improve the security of your website....
Dynamic Process Isolation: Research by Cloudflare and TU Graz
2021-10-12
Cloudflare worked with TU Graz to study the impact of Spectre on Cloudflare Workers and to develop new defenses against it. Today we're publishing a paper about our research....
Privacy Pass v3: the new privacy bits
2021-10-12
A new version of Privacy Pass for reducing the number of CAPTCHAs....
Announcing Cloudflare Research Hub
2021-10-11
Announcing a new landing page where you can learn more about our research and additional resources....
Internship Experience: Research Engineer
2021-10-11
Over the summer of 2020 I interned at Cloudflare Research. This invaluable experience contributed to Cloudflare’s support of ODoH protocol, and I was awarded the best student paper award at PETS 2021....
Cloudflare invites visiting researchers
2021-10-11
As part of Cloudflare’s effort to build collaborations with academia, we host research focused internships all year long. Interns collaborate cross-functionally in research projects and are encouraged to ship code and write a blog post and a peer-reviewed publication at the end of their internship....
Cloudflare Research: Two Years In
2021-10-10
What Cloudflare Research has been up to for the last two years....
Where is mobile traffic the most and least popular?
2021-10-09
We used Cloudflare Radar to find out those countries on the planet that have more (and less) mobile traffic on the Internet. Africa and the Middle East are the areas of the planet where mobile traffic dominates the Internet experience...
Helping Apache Servers stay safe from zero-day path traversal attacks (CVE-2021-41773)
2021-10-08
On September 29th 2021, the Apache Security team was alerted of a path traversal vulnerability being actively exploited (zero-day) against Apache HTTP Server version 2.4.49. Customers running the affected Apache version, should update to 2.5.51 as soon as possible....
In a win for the Internet, federal court rejects copyright infringement claim against Cloudflare
2021-10-07
In Mon Cheri Bridals, LLC v. Cloudflare, Inc., the United States District Court for the Northern District of California granted Cloudflare’s motion for summary judgment and concluded that no reasonable jury could find Cloudflare liable for the alleged copyright infringement at issue....
Waiting Room: Random Queueing and Custom Web/Mobile Apps
2021-10-07
Today, we are announcing Waiting Room’s general availability and several new features that have user experience in mind — an alternative queueing method and support for custom web/mobile applications!...
Update on recent VoIP attacks: What should I do if I’m attacked?
2021-10-07
Because of the sustained attacks we are observing, we are sharing details on recent attack patterns, what steps they should take before an attack, and what to do after an attack has taken place....
Staging TLS Certificates: Make every deployment a safe deployment
2021-10-06
We are excited to announce that Enterprise customers now have the ability to test custom uploaded certificates in a staging environment before pushing them to production. ...
