A global assessment of third-party connection tampering

What this post added

This post introduces a significant new dimension to website security by detailing Cloudflare's research into global connection tampering. It quantifies the prevalence of such tampering (20% of connections), identifies signature patterns indicative of third-party intervention (censorship, ISP blocking, enterprise security), and provides global insights into these practices through new dashboards and APIs on Cloudflare Radar. The post also explains the technical underpinnings of connection tampering, particularly related to the SNI field in TLS, and uses telephone call analogies to make the concept accessible.