A Company Called cloudflare. He is based in San Francisco. Mr. Prince, what is cloudflare . Guest cloudflare is a service which is helping build a better internet. Had we all known what the internet was going to be 30 years ago, we would have done things differently. We would have made it more secure, made sure it was always available and given users of it insight into how it was work. So what cloudflare does is we run a network that spans the globe. We have seven million customers that range from tiny, little Small Businesses up to some of the fortune 50 companies, and we insure that they are fast, safe, always available no matter who is accessing them anywhere online, protecting them from hackers, making sure the good guys get through on a fast lane. And we run one of the Largest Networks in the world, so so we have data centers in 120 cities around the world, we see about 10 of all internet requests flow through our network. And when were doing our job right, you dont know we exist. Host how do you do that . What technologies do you use . Guest so we built all of our own software. So we have equipment running in those 120 cities. Im sitting in San Francisco right now, so our nearest data center is in san jose. We have one outside of washington, d. C. In ashburn, virginia. When you visit one of our customers, youll be directed to whatever the closest data center to you is. So if you are in washington, d. C. And you went to, i dont know, metallica. Com whos a longtime customer of ours, you would hit our data center in ashburn, virginia. There we would do analysis on whether or not you are trying to hack the site somehow or whether you are an actual metallica fan. If you were trying to hack it, we would stop you there, otherwise, wed put you on a fast lane to get you to the content youre trying to the get to as quickly as possible. And, again, from the end users perspective, that should just look like the internet working in the way it should. Host how many transactions go through your networks on a typical day, typical week . Guest billions or trillions, depends on how you count that. We do about five billion page views per cloudflare employee. So thats about 2. 5 trillion page views every single month passing through our infrastructure. And we see about 2. 5 billion of the worlds internet users, effectively the entire internet population passing through our network on a monthly basis. Host well, back in august, mr. Prince, you tweeted out, quote i woke up this morning in a bad mood and decided to kick them off the internet. What is that referring to . Guest i didnt tweet that. That was, came from an internal email that we sent to people who were employees of cloudflare. What that is an incident thats specifically referring to that one of cloudflares seven million users was a particular neonazi site known as the daily stormer. Every day 15,000 people sign up for cloudflare, and they range from, again, things that are totally noncontroversial to sometimes some controversial things. We see 10 of all internet requests, and we see probably 10 of all the really horrible and horrific things on the internet. In this case, the daily stormer was using our service, and they had come under they had been kicked off of both googles Registrar Service and godaddys service, and increasingly we received pressure to kick them off of our service as well. And so we actually changed or i would say violated what was our policy of being neutral as a network and made the determination that at that point enough was enough, and the vile content that was being published on the daily stormer, we didnt want to have it going across our network. Host is this the one and only time that youve kicked off a site or closed down a site . Guest i would say you know, were a lawabiding company, and so when we get a court order or other Legal Process that requires us to do something, then well follow that Legal Process. But if you set that aside and you look at just times where we have ourselves made an editorial decision, i think this was the exception. And what i went on to talk about in a number of forums is why that actually is a pretty dangerous exception. Increasingly, if youre trying to put content on the internet, you need to rely on a service like cloudflare in order to make sure that it stays fast and safe and available. And if someone like me is able to make the determination of what content and cannot be online, an invisible service that, you know, everyone thats watching this has used probably hundreds of times in the last 24 hours but you dont even know when youre using it, that, i think, poses some real challenges from a Public Policy perspective which im not sure that i am the person who has been sort of democratically selected to be making the decision on what content is good or bad online. Host well, in a wall street journal editorial, you wrote that at some level its easy to fire nazis as customers, but the upshot is that a few private companies have effectively become the gatekeepers to the public square. Guest thats right. You know, in this case these we didnt make any money off of, off these customers. We have a free version of our service which most of our most troublesome customers end up using. And so if anything, you know, we people were applauding our decision to not let these people use our network. But what i worry about is that as you create those, those systems where a very few set of private companies can be making the decision on what content is and is not allowed, that that forces us towards, you know, reverting to sort of the lowest common denominator and, you know, right now its easy to kick neonazis off and say thats bad and thats sort of universally acclaimed, but over time, you know, those decisions just get more and more tricky. And in this intervening time since we made that decision, weve had requests from a number of people around the world to kick over 3500 of our customers offline, and those range from other sites that espouse, you know, neonazilike beliefs to extremely leftwing sites to sites in the middle that might have controversial content to sites which, frankly, we have no idea why anyone would want to kick them off, maybe they just didnt like what was on it. Once you start down the path of saying this invisible deep Infrastructure Company that is running the network gets to make decisions, i dont think that you might like where you come out at the other end. Its a little bit akin to if the phone company was listening in on the conversations that you had and decided that they didnt like your tone of voice or the language you were using or the topics you were discussing, if they just pulled the cord and shut down the phone line. That violates a social contract which weve had with the phone company for quite some time. What i think is happening is that there are a number of Companies Like cloudflare that are that deep infrastructure that runs behind the scenes and makes the internet work. And the core question is whether or not we are the right ones to be making the decision on what content should and should not be allowed online. I worry that if were the ones making that editorial decision, that we cant live up to the sort of transparency and accountability and consistency that due process really requires. Host well, mr. For prince, should the daily stormer be allowed to have a site on line somewhere . Guest i think that, again, is a question that is above my pay grade. You know, i think that that is a question that societies have to make and determine for themselves. I think in the United States, which is the country that i grew up in, im the son of a journalist, you know, we have a tradition of free speech and protections of that and that we have a history of defending even ugly, vile speech under the theory that having more speech is the best way to defeat speech, ugly speech and that censorship doesnt work over the long term. What i think is important to remember though is that that history is uniquely, unique to the United States and there are very different histories if youre a german or a turk or someone whos live anything china. Living in china. And so we have to operate on a global basis. We run data centers in all of those places. And individual societies may make different decisions. In germany, for instance, they may make a decision that the daily stormer doesnt need to exist. What i worry is that if whatever the most restrictive regime is around the world sets the policy and that policy then applies globally, that we all then revert to what the least common denominator is. And so in germany the answer might be, no, the daily stormer shouldnt be online, but in the United States it might be that it should be available online. And i think each individual jurisdiction has the right the decide that and that it, again, shouldnt be decided by some deep Infrastructure Company like cloudflare. Host so are transnational entities such as cloudflare, etc. , will they supersealed the First Amendment . Supersede the First Amendment . Guest well, again, i think that First Amendment applies within the United States and that the and that applies to government restriction within the United States. As a private company, you know, cloudflare or any Technology Company can make whatever determinations that it wants to make based on what its terms of service are, and we dont have an obligation to provide service to anyone. That said, again, you know, i come from a a tradition where, you know, free expression, free speech is a sacrosanct policy. But i think we have to respect that other jurisdictions around the world have different policies. And so again, i think whats dangerous is if you have a deep Infrastructure Company making editorial decisions on what content and cannot be online. Host and in a blog post that you posted on your Cloudflare Web site, you asked the question where do you regulate content on the internet. Did you have an answer for that . Guest well, you know, i think the framework that makes a lot of sense for me because it is so globally applicable is actually not the First Amendment or free speech framework, but instead to think about where who can, who can follow principles of due process. And the three key pieces to due process are transparency, accountability and consistency. And if you think about it, who is even capable of being those things . In the pretechnology sort of preinternet context, if youre reading the newspaper, you know whose newspaper youre reading. And there may have been the conservative newspaper or the liberal newspaper, but you understand sort of the editorial point of view. Theres a masthead that lists who the publisher is, who the different editors are. Every article has a byline which is associated with it which, again, is that transparency and accountability and consistency that you demanded. And in the newspaper context, if something was wrong, then they would publish corrections to that. Thats you may not have any idea who the Printing Press was behind the scenes. And if the editor or publisher of the newspaper makes a decision on what and cannot be in the newspaper, that follows a social contract that we have with newspapers. If the Printing Press operator, on the other hand, reads an article and says i dont particularly like the way this is, im going to change a few words here to make it instead of being a positive article a negative article, that changes the social context which is in place. If you fast forward to the internet era, the question is who is the newspaper operator and whos the Printing Press operator. I think cloudflare is something more akin to the Printing Press, running behind the scenes that 99. 9ed of the people passing through our Network Every month have no idea we even exist. So when we decide that something is not allowed or is allowed, its very, very difficult structurally for us to be transparent about that. And as a result, its very difficult for us to follow what i think are good practices of due process. On the other hand, when youre on facebooks site, you know youre on facebooks site. When youre only on google, you know youre on google. So that is much more akin to a newspaper. And fundamentally, if you think about facebook, they inherently are already performing what is an editorial task. They are ranking information and editing out the things that you see or the things that you dont see versus the things that you do see. That is a place where there is a much greater expectation that they can exercise editorial control, and if they go beyond what is reasonable, that they can be held to account for it. Theyre much closer to being a newspaper and, therefore, a much better place for you to think about when youre exercising control online. That doesnt mean that they should or should not allow one type of content or another. But, again, i think it is less problematic when you have companies that are already acting as editors making editorial decisions than when you have deep Infrastructure Companies that there is no expectation that theyre acting as editors, making those decisions. Host what about browsers or hosts . Should they also be the editorial arbiters . Guest well, again, i think that is a, thats the social contract that we have to work out. For me, you know, you look at the example of the daily stormer and google. So two days before we kicked the daily stormer off of our service, google kicked them off their Registrar Service which is the service that they used to purchase their domain name. What east interesting whats interesting though is google didnt delist them from search, they did not kick them off their dns service that they run, they did not push an update to chrome, the browser that they run that would block access to them. And so what i think that illustrates is not that google did something wrong, but instead that it is a complicated set of decisions which requires nuance. And its not simply, you know, did google keep them on or kick them off. Google decided that for one particular service it did not make sense for the daily stormer to be using that service, but for other Services Including the browser that they didnt think that it was right for them to push out an update to block it. They technically could have done that. And the question is then as users of technology what is the social contract that we have with those technologies and where do we expect editorial control to come in. On my browser im totally fine when chrome puts up a warning that says if you visit this page, youre going to get infected with malware. That seems like its right. I, on the other hand, would be very uncomfortable if my browser said if you visit this page, you might be exposed to some ugly ideas that we dont think you should see. That doesnt feel like the right thing for a browser to do. Whats hard is these are social contracts that get worked out over a long period of time. The internet is 30 years old, and so we havent had the time to really figure out as a society where the right places for this regulation to be put in place, this editorial, these editorial decisions to be put in place are. But over time im hopeful that we as a society will, just as we would find it very strange if the phone company were listening in and pulled the plug when we said something bad, i think we will work out as a society where its right to have editorial decisions and where its wrong. Host well, is there a role in this editorial Decision Making for the federal government, for the fcc, for the congress . Guest i mean, i think potentially. But we have to remember that all of these companies are operating in a very multinational environment. And so i think in each of those different jurisdictions there are going to be sets of rules which are in place on what content is and is not allowed. And, frankly, you know, law enforcement, congress, the court system, those are institutions in this country that have a political legitimacy that goes way beyond, you know, myself or Mark Zuckerberg or anyone else that is running a Technology Company. At some level what we are trying to do is follow what law is. Where i think this gets murky is when were making determinations on, again, what content is good and is not good online. But again, in the United States because of the First Amendment and because of the deep freedom of expression protections, you know, i think that youre going to have much less content restriction here than you will see in places like europe or china. Host but, matthew prince, the technology is there, isnt it, to shut off content at a border, at a National Border . Guest well, it depends. I mean, i think that a country like china has done a lot to be able to regulate the way the content flows in and out of their borders. But that has come at a great cost to them because the performance of the internet inside the country is not nearly what you would see in the United States or western europe or other countries with the level of internet use that you have. You have basically four exit points from china, and all of those have to pass through infrastructure, all of which creates a bottleneck and a chokepoint. And if you talk in china to engineers who are trying to develop new technology and new code, you know, one of the things that ive heard is, you know, just a often times sort of a longing for access to tools like google and otherwise not so much to get, you know, what would be politically controversial content in china, but simply to find code samples or find answers to problems to solve those different, to solve whatever technical problem they want to be solving. And so, you know, i think that the more that you restrict access to information, increasingly that comes at a cost to the ability to be creative and develop solutions. And so, you know, i think that countries that go down the path of china and were seeing a lot of them, it is increasingly a popular position across europe to say, hey, lets follow the path that china has blazed here in terms of creating National Borders and content ricks there the more that you do that, that does come at a cost of limiting access to some tools that, again, are quite outside of the political realm but might be, might be important for people trying to build Innovative New technologies or develop the future. Host well, matthew prince, as a ceo of a transnational company, have you had to adhere to chinas restrictions, germanys restrictions in your work . Guest sure. So, you know, we run Data Centers Across china, and in china one of the regulations is that content that is broadcast from inside the country has to, has to have whats called an icp license. And so there are customers of ours that can be announced inside our infrastructure inside china because they have those icp licenses, and there are other customers that cannot. That doesnt make them any less accessible than they would have been otherwise, but that is complying with the law in china. The same thing is true in germany, same thing is true in the united kingdom. In the united kingdom, there are restrictions on content that and cannot be put in place, and again, we have to deal with those regulations and restrictions as a company that operates in those places, has equipment in those places and has employees in those places. And increasingly, i think that thats the challenge, is that its very easy when youre sitting in any particular country to think that its just your laws that apply. But the challenge is that a company like ours has to operate in jurisdictions all around the world. What i think is important is that, you know, if you listen to the chinese regulators, they will talk about how they have a sovereign right to be able to regulate their infrastructure. I think that the right answer to that, its hard to actually argue against that. But i think the right answer is that while china has a sovereign right to regulate infrastructure inside china, the minute that their regulations extend beyond china to regulate, you know, thailand or vietnam or the United States or canada, that that inherently is infringing on the sovereign right of those countries around the rest of the world. And so what i think as an infrastructure we need to think about is how when this is regulation that applies in any one country it can affect that cup, but it cant necessarily spill over beyond that country. And then i think principles of due process really apply globally and are respected around the world which means that if there is restriction on content that is imposed in one particular place or another, that needs to be transparent that that happens. So in the case of google when google has to under like the e. U. Right to be forgotten remove content, its important that they put manager up there which is what their practice is that says we were ordered to do this under a court order, and heres an example of the court order, and heres exactly who you should talk to if you dont think this is the right thing for it to be done. And then each country should be deciding what its content restrictions are. Again, i come from, i come from the United States, and i believe deeply in the First Amendment, and i think that over time as a country that makes more information available, that helped innovators in this country, and that makes it more likely that youre going to get the future developed here and that the people who want to make sure that they can have access to all of the information around the world and are adult enough to be able to handle it and understand it, that they will flock to this country in order to the create the future. Because having more information makes it more likely that you will be more innovative. Host back to your august 16th blog post. Someone on our team asked after i announced we were going to terminate the daily stormer, quote is this the the day the internet dies . What was your response . Guest i said i worried about it. I said that if a deep Infrastructure Company like cloudflare started making editorial decisions, that that was really risky. And what ive been happy with is that since then weve had a whole bunch of conversations like this one with people around the world. And where prior to our decision to terminate the daily stormer all of the pressure was simply, you know, take it off, take it off, take it off, since then weve had people around the world say, wait a second, lets stop and think about where we actually want the internet to be regulated and controlled. And, you know, weve seen editorials in, you know, the washington post, in the New York Times that have said, you know, maybe deep infrastructure Companies Like cloudflare arent the right place to regulate the internet. And thats good, but what was really encouraging to me is when we saw newspapers across germany start to write, well, yeah, of course, you know, neonazi content is bad, but maybe we dont want, you know, this faceless organization being the one thats picking when that content is online or not online. Its a nuanced argument. And, you know, obviously in d. C. Right now there are a lot of questions about the companies that are much more household names and whether or not they should be regulate aring content which is on their networks. But i do think that its important that we think about what is the difference between being, you know, a facebook or a youtube versus being, you know, a deep Infrastructure Company like cloudflare or level iii or a registrar or a search engine. The rules for each of those things are different, and i think that as regular hate arers are thinking about regulators are thinking about how they are going to put controls and process in place around the world to regulate content, each of those Different Levels should be considered in a different way. And the framework again that i would come back to is does this align with the ideas of due process. Is it transparent, is it consistent, is it accountable. And that is much easier in consumerfacing Companies Like a facebook or a twitter or youtube. Its much harder in deep infrastructure Companies Like a cloudflare, level iii or at t. Host matthew prince has an mba from harvard, a j. D. From the university of chicago. Have you had these conversations with the platforms and the hosts and the browsers as well . Guest well, i think that, you know, we ended up interacting with a number of different entities around world. And so and those are the browser companies and the Platform Companies and social networks and search engines. And so, yes, is the short answer. Weve had these conversations since the daily stormer, and we had these conversations before daily stormer. And i think, again, all of us are trying at the end of day not to say were not responsible for the content that goes through us. In fact, i think were deeply responsible for the content that goes through us. But that responsibility isnt simply kick things off. That responsibility is make sure that were doing it in a way which, again, a aligns with principles of due process. And what i worry about is that no matter how many we could put billboards up saying our policy is no neonazis. The vast majority of people would never have any idea that theyre even using cloudflares network. So if we silently censored a part of the internet, something would die and disappear without any transparency. And i think, again, that creates real risk. That might be a very different answer when youre a facebook or a twitter or a youtube. And so i think that in the process of having those conversations with those other companies what were trying to tease out altogether is that there is nuance here. And as regulators think about what the right way to regulate the internet is, that they make sure that they understand that nuance and dont paint all technologies with a broad brush. Host so, matthew prince, three months after you pulled the plug on the daily stormer, would you do the it again . Guest well, i think in the short term, you know, were im happy with the decision that we made. We needed to have this conversation, and, you know, theres a one of my favorite sayings is from a former congressman, j. C. Watts, who said, you know, the challenge in politics and the press is when youre explaining, youre losing. And for quite some time, we felt like we were explaining what the dangers were of us actually regular lating the internet and content in this way. And, frankly, we were losing. We were losing that argument. And people just kept every day getting louder and louder saying you need to kick this off, you need to kick this off, and there was no counterbalancing point. And so i think the daily stormer was the exception that proved how important it was to have rules in this case and to be very clear with what those rules are. And so that decision provoke ised a debate provoked a debate, and i think that that debate is going to be something which is very valuable for us as a company, but more importantly, for the internet as a whole to have had in that that debate will help us create what these social constructs are. So organizations like the Electronic Frontier foundation, the aclu and others have come out and said this is actually a dangerous precedent to set. And i dont disagree with them. And so i think in the short term im happy that we made that decision, but im also happy that we havent done that again