#264 Nick Sullivan: Cloudflare – The Internet’s (De)centralized Security Blanket

Support the show, consider donating:
BTC: 1CD83r9EzFinDNWwmRW4ssgCbhsM5bxXwg ( )
BCC: 1M4dvWxjL5N9WniNtatKtxW7RcGV73TQTd ( )
ETH: 0x8cdb49ca5103Ce06717C4daBBFD4857183f50935 ( )

We enter dozens of trust relationships ever time we interact with the Web. Browsers, ISPs, DNS providers, cloud hosting companies, all the way down to the handful of people who control certificate root keys; we rely on the integrity of these intermediaries to serve reliable, and accurate information. The concentration of power by any one of these actors threatens to compromise the very foundational principles of the Web. Decentralized technologies, like Bitcoin, Ethereum, Tor, and IPFS seek to reverse this trend.

We're joined by Nick Sullivan, Chief Cryptographer at Cloudflare. Founded less than 10 years ago, the company offers content delivery services (CND), DNS, and DDoS protection to over 12 million websites. The company contributes to open source cryptography libraries, some of which are used by Etherum. They recently launched an IPFS gateway and features which allow users to have strong guarantees as to the integrity of the content.

Topics discussed in this episode:
– Nick's background as a cryptographer and previous position at Apple
– The Internet's infrastructure and trust model
– How Cloudflare is experimenting with IPFS
– The challenges to hosting static websites with IPFS
– Cloudflare's Onion routing service (Tor) and the benefits to users
– The Roughtime protocol and encrypted SNI
– Cloudflare's contribution to open-source cryptography libraries
– The vulnerabilities of DNS and Cloudflare's free private DNS service (

Links mentioned in this episode:
– Welcome to Crypto Week (article):
– Roughtime: Securing Time with Digital Signatures (article):
– Introducing CFSSL – CloudFlare's PKI toolkit (article):
– End-to-End Integrity with IPFS (article):
– Introducing the Cloudflare Onion Service (article):
– Cloudflare's Distributed Web Gateway:
– Nick Sullivan's website:

– Azure: Deploy enterprise-ready consortium blockchain networks that scale in just a few clicks –

This episode is also available on :
– Epicenter.tv:
– YouTube:
– Souncloud:

Watch or listen, Epicenter is available wherever you get your podcasts.

Epicenter is hosted by Brian Fabian Crain, Sébastien Couture, Meher Roy & Sunny Aggarwal.