You know the feeling. You click a link, and instead of the article, you get a blank screen. Then, a spinning wheel. Then, the dreaded ‘Verifying you are human. This may take a few seconds.’ It takes twenty seconds.
Meanwhile, behind the scenes, the infrastructure powering that website just celebrated saving 15 milliseconds on a TLS handshake. Cloudflare recently announced a massive technical victory: they cut their origin HelloRetryRequests from 52% to 3.7%. It’s a staggering feat of engineering at scale. But it highlights a dark, frustrating paradox in modern tech.
We are paying for millisecond backend optimizations with seconds of our actual lives, and calling it progress.
Here is the dirty secret of the modern internet: the protocols that run it are becoming so complex that only a handful of mega-corporations can actually afford to implement them. When HTTP/2 and HTTP/3 rolled around, they brought massive performance gains. But they also brought a level of cryptographic and network complexity that open-source servers took years to catch up on. In some cases, they still haven’t.
You can’t just ‘vibe-code’ infrastructure. Knowing that a TLS 1.3 handshake needs an optimization to avoid an extra roundtrip—let alone having the engineering firepower to scan millions of origins daily to fix it—only becomes apparent when you operate at Cloudflare’s scale.
Complexity is the enemy of the open web, and the best friend of the monopolist.
The open-source community is lagging years behind. The separation between what proprietary infrastructure can do and what open-source software can handle is widening into an unbridgeable chasm. We are being forced into the arms of centralized intermediaries because they are the only ones who can justify the micro-optimizations required to make the modern web function.
And once you rely on a centralized intermediary for your core infrastructure, you are at their mercy. They can optimize the backend to save 15ms, and then turn around and slap a 20-second bot-nag screen on your frontend. They can complain about LLM scraping load on a Monday and force you into their walled garden on a Tuesday. You have no say in the matter.
The ‘open web’ isn’t open anymore. It’s a toll road. We traded decentralization for a slightly faster TLS handshake and a much worse user experience.
You don’t own the internet you build on; you just rent it from whoever owns the pipes.
Next time you’re staring at a ‘Just a moment…’ screen, waiting to access a site that loads in 0.1 seconds once the gatekeeper lets you through, remember this: the internet isn’t slow because of your connection. It’s slow because someone has to pay the gatekeeper.
FAQ
Q: Isn't Cloudflare's optimization just good engineering?
A: Yes, it's brilliant engineering, but it's engineering that only serves Cloudflare's business model. They optimize the backend to justify their existence, then degrade the frontend to monetize their security products. It's a captive market.
Q: If I build a web app, does this actually affect me?
A: Absolutely. You are forced to rely on closed intermediaries because managing TLS 1.3 and HTTP/3 at scale is practically impossible for independent developers. Your app's performance and user experience are dictated by Cloudflare's commercial incentives.
Q: Is the open web actually dead?
A: Yes. The 'open web' is a marketing term we use to feel good about our dependencies. When the protocols themselves require corporate-scale resources to implement efficiently, openness is just a temporary state before absorption.