4 ms·
Additionally, a lot of sites probably just use CFs crypto, without securing it to their backend servers. Hence there could be less encryption overall.
by MichaelGG 11y ago
Additionally, a lot of sites probably just use CFs crypto, without securing it to their backend servers. Hence there could be less encryption overall.
- duskwuff 11y agoIndeed, CloudFlare will happily run an HTTPS front-end proxy to an origin which is using a self-signed certificate, or even to a HTTP origin. Thought that site was secure? Think again!
- slipstream- 11y agoIf the origin used a self-signed cert, doesn't cloudflare use certificate pinning?