[Ansil849]

They sure do [1].

[1] https://krebsonsecurity.com/2015/01/spreading-the-disease-an...

[jdc]

If I'm understanding this correctly, then what Cloudflare is doing is hosting websites of DDoS services rather than hosting DDoS attacks themselves.

[Ansil849]

Yes, that's right. I don't think anyone here has been claiming otherwise.

[jdc]

Thanks. Just clarifying for some of us (including myself) who tend to jump to the most exciting possible conclusion.

[arein3]

Don't understand why anyone bothers to accuse cloudflare of encouraging ddos by simply hosting a website

I assumed that they actually did the ddos

[aliswe]

2015. not saying that anythings changed but worth noting.

quote from said article for perspective:

The Web site crimeflare.com, which tracks abusive sites that hide behind CloudFlare, has cataloged more than 200 DDoS-for-hire sites using CloudFlare. For its part, CloudFlare’s owners have rather vehemently resisted the notion of blocking booter services from using the company’s services, saying that doing so would lead CloudFlare down a “slippery slope of censorship.”

As I observed in a previous story about booters, CloudFlare CEO Matthew Prince has noted that while Cloudflare will respond to legal process and subpoenas from law enforcement to take sites offline, “sometimes we have court orders that order us to not take sites down.” Indeed, one such example was CarderProfit, a Cloudflare-protected carding forum that turned out to be an elaborate sting operation set up by the FBI.