Skip to content

Commit d862def

Browse files
olipayneCloudflare AI Agent
authored andcommitted
Update clearance.mdx (#26449)
1 parent b337df7 commit d862def

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

src/content/docs/cloudflare-challenges/concepts/clearance.mdx

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,10 @@ import { Render, DashButton, Steps } from "~/components";
1010

1111
A `cf_clearance` cookie proves to Cloudflare that the visitor is a verified human and has passed the Challenge presented to them.
1212

13+
The `cf_clearance` cookie is securely tied to the specific visitor and device it was issued to. This binding is a security feature designed to prevent the cookie from being easily transferred and re-used on other machines.
14+
15+
As an additional layer of security, Cloudflare recommends that customers [add a rate limiting rule](/waf/rate-limiting-rules/) based on the `cf_clearance` cookie value. This ensures that a single, valid cookie cannot be abused by a single machine to send an excessive volume of requests.
16+
1317
If a visitor passes an Interactive Challenge (highest security level), then the `cf_clearance` cookie indicates this to the origin and allows the visitor to bypass any other Challenge on the website, whether it is another Interactive Challenge, a Managed Challenge, or a non-interactive JavaScript Challenge for as long as the cookie is valid.
1418

1519
If a visitor receives a `cf_clearance` cookie on a page that uses a WAF rule with Managed or JavaScript Challenge (lower security levels), then encountering a different page with a higher security clearance level Challenge will prompt them to solve the Challenge again.
@@ -98,4 +102,4 @@ For more details on managing hostnames, refer to the [Hostname Management docume
98102
3. Under **Would you like to opt for pre-clearance for this site?** select **Yes**.
99103
4. Choose the pre-clearance level from the select box.
100104
5. Select **Update**.
101-
</Steps>
105+
</Steps>

0 commit comments

Comments
 (0)