Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Cloudflare-Pale Moon dialogue stalled by overly broad NDA & secrecy of broken JS (palemoon.org)
8 points by mimasama 4 months ago | hide | past | favorite | 3 comments


Despite a long working relationship between Pale Moon and Cloudflare in the past, the latter refuses to disclose to the browser developers the 2 particular JavaScript functions and some CSP assumptions required by CF's browser check.


The only reasonable long–term strategy is for users to simply stop using any site which presents them with a captcha or other verification measure of any kind. Of course, 99% of users only care about how easy it is to get their fix and have never considered any of the long–term consequences, so it’s not reasonable for a browser to rely on their users adopting that behavior.


It's not that easy. Although some site owners enable protection without thinking about it, a lot of the time this is deliberate.

Site owners are increasingly concerned about AI crawlers taking their content without giving anything in return.

I'm afraid that this fight will only get more desperate as AI and AI agents start to replace more and more web browsing.




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: