Deprecating the __cfduid cookie
Dec 9, 2020Sergi Isasi
Summary
This post announces the deprecation of the __cfduid cookie, which was previously used as one signal in bot detection models. The company is transitioning away from this cookie to enhance privacy by not relying on end-user IP addresses for bot detection. This change is driven by experiments showing the possibility of running bot detection algorithms without the cookie, aiming to simplify the web and improve privacy. Customers are given notice to transition, and the bot management team is ensuring no decline in detection quality.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack