Cloudflare is an irresistible hub for mass-surveillance. By design, it sits as a permanent Man-in-the-Middle, holding the keys to traffic across huge chunks of the web. Cloudflare is basically a centralized vulnerability factory.

We wrote a Firefox extension that blocks any website using Cloudflare. Simple as that.

https://addons.mozilla.org/en-US/firefox/addon/cloudflare-blocker

Repo with source: https://git.libroot.org/libroot/Cloudflare-Blocker.

• It inspects HTTP headers.

• If Cloudflare-related headers are detected, the request is killed on the spot.

• You get a toggle in the popup menu to turn it on or off.

Cloudflare wants to normalize a world where "secure" means "MITM by default." That's unacceptable. This extension makes the compromise visible and gives you the power to reject it.

The code is out there, free and open. Audit it, fork it, break it, improve it.