If that meant free tier had WAF then sure, I’d enable that.

Which 2015 kernel are you running?

Free tier doesn’t get WAF. We kept working.

Their December 3rd blog about React states:

"These new protections are included in both the Cloudflare Free Managed Ruleset (available to all Free customers) ..... "

having some burn in time in free tier before it hits the whole network would have been good?!

> So, what are the alternatives?

That sums up my gripe with the vocal cloudflare haters. They will tell you all day long to move but every solution they push costs more time and money.

What does data in a program do apart from eventually modify behavior?

Expose it on port 22 on ipv6 and it might as well be invisible. Cleanest logs ever.

Why dont providers offer dns api keys restricted to txt records?

https://dns.he.net/ does. Each record can have its own secret. You can also use this for things like A records to do dynamic DNS.

desec.io allows you to create (through the api) tightly-scoped tokens that can only update the "_acme-challenge.subdomain.example.com" domain needed for DNS-01 challenges.

I switched to them from cloudflare dns for that specific functionality and it works great.

Very good question. On e.g. AWS one could probably do something like that with a custom Lambda…? Still, would be very convenient if there was some IAM rule for that.

I have 30 years experience working with computers and I get nervous running a three line bash script I wrote as root. How on earth people hook up LLMs to their command line and sleep at night is beyond my understanding.

Apple could reissue my two year old iphone with the same specs and a bigger battery and I'd buy it again. Still not sure why they hate thick phones. My pockets are ready.

Some men are reluctant to engage with a strangers post if they are female. Not every reason for this reluctance is sexism. Billing it as such isn’t going to drive engagement.