andy_pl

5 ms·

1. 1.▲
   by andy_pl 5mo ago

   Slightly more nuanced now — EDPB's 2024-2027 strategy explicitly prioritizes large-platform enforcement, and recent turnover-based fines (Meta €1.2B in 2023, TikTok €345M, Uber €290M in 2024) suggest the deterrence math is tightening.
2. 2.▲
   by andy_pl 5mo ago

   Right, the Pages vs Tunnels split is real — different threat surfaces. For a homelab the GDPR/SCC scaffolding doesn't apply; the practical question becomes "do I trust CF more than my own ISP for opportunistic snooping,"
3. 3.▲
   by andy_pl 5mo ago

   Same trust assumption as any reverse-proxied or CDN-fronted service. CF terminates TLS for Tunnels, Workers, the regular proxy, and Pages alike — if CF is in your threat model, the issue isn't Tunnels specifically, it's the entire