IPFS is a p2p file storage, so cloudflare doesn't control what content is put
there, they don't even know who put it there, so it's a natural extension of
their "we're not responsible, it's our customer's responsibility, but we won't
tell you who that customer is" policy.
I chose to reject all IPFS URLs. If people have a legitimate use for
them,they'll have to tell me so I make an exception for them.
Cheers,
Hans-Martin
May 13, 2024 at 5:04 PM, "Benoit Panizzon via mailop" <mailop@mailop.org> wrote:
>
> Hi all
>
> Our customers increasingly get phishing emails targeting our email
> platform accessible under the domain: Cloudflare-ipfs.com
> (interplanetary file system, I guess that is their name for CNS).
>
> I reported some of those to the cloudflare abuse desk.
>
> To my surprise, after usually 1 or two days I get a replies From:
> "Cloudflare" <ab...@sparkpostmail.com> about them blocking some of the
> single URL we report.
>
> So is sparkpostmail.com linked to cloudflare?
>
> Unfortunately the basic issue is not being addressed. The phishers
> seem to be able to generate new URI under cloudflare-ipfs.com much
> faster than ab...@spakpostmail.com is able to block them.
>
> Even SpamAssassin now has a rule matching those:
>
> URI_CLOUDFLAREIPFS References Interplanetary File System PtP
> content via CloudFlare, likely phishing
>
> Mit freundlichen Grüssen
>
> -Benoît Panizzon-
> --
> I m p r o W a r e A G - Leiter Commerce Kunden
> ______________________________________________________
>
> Zurlindenstrasse 29 Tel +41 61 826 93 00
> CH-4133 Pratteln Fax +41 61 826 93 01
> Schweiz Web http://www.imp.ch/
> ______________________________________________________
> _______________________________________________
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
>
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
