Cloudflare mandate letter
A Cloudflare mandate letter is a letter that is sent to a website-owner
by a domestic intelligence agency, and which demands that
the website-owner use the DDoS-protection company Cloudflare,
such that all of the website traffic goes through Cloudflare.
The website-owner may already be using a different DDoS-protection company,
in which case the letter forces the website-owner to switch companies.
Cloudflare's servers have a large / high-volume connection to the servers of
the U.S. National Security Agency (NSA).
Forcing a website to use Cloudflare serves two purposes:
1. To force the website traffic through those servers which are so closely-linked to the NSA
(this mainly serves U.S. intelligence in particular), and, more importantly:
2. To coerce the website-users into enabling javascript (and thereby violating their privacy)
in the event of a DDoS attack upon the website. But, it is the intelligence agencies themselves
that make those DDoS attacks, thus coercing javascript onto the website-users.
The NSA's DDoS'ing system is code-named "QUANTUM".
That type of two-part attack in that latter purpose may be called a
"Cloudflare-QUANTUM attack" or "QUANTUM-Cloudflare attack"
or "QUANTUMflare attack" or "Cloudflare-DDoS attack".
Cloudflare mandate letters typically include a gag-order,
which forbids the recipient of the letter from telling other people that they have received the letter.
A Cloudflare mandate may additionally be accompanied by a javascript mandate
and/or a TLS-1.3 mandate.