Luxas on Nostr: From a web perspective, if you use Cloudflare with a traditional service that has a ...
From a web perspective, if you use Cloudflare with a traditional service that has a login/password mechanism, it means Cloudflare can technically see your password. Fortunately, with Nostr where the signing first occurs locally (whether by client or a extension or remote signer) Cloudflare would never see your nsec private key and they also wouldn’t see your NIP-17 encrypted messages nor could they decrypt those. So, for a relay, to be critical is a bit overblown. The only valid criticism might be that by using Cloudflare it centralizes the service, which I understand. But for the most part Cloudflare is one of the more sensible corporations when it comes to them trying to censor things. And that usually only comes after something incredibly egregious that caught media attention and then Cloudflare must make a tough decision on what to do. Some regular noting of your opinion is not likely to get such drastic measures and force censorship. The majority of Nostr relays use Cloudflare services as they do provide the best cloud-based, anti-DDoS services around.
