5 ms·
Users connect to Cloudflare edge server with its own certificate. Then it's decrypted and re-encrypted to the origin server. Right? I imagine it's like this: ht
by logn 11y ago
Users connect to Cloudflare edge server with its own certificate. Then it's decrypted and re-encrypted to the origin server. Right? I imagine it's like this: http://i.imgur.com/DASFtbw.png http://i.imgur.com/DASFtbw.png
- nailer 11y agoI believe Cloudflare provide their own private CA and let customers set this up to encrypt between Cloudflare and the customer's origin servers. However from speaking to Cloudflare I don't think this is enforced - i.e., Cloudflare allow their customers to indeed send a web users data in the clear over the internet.
- logn 11y agoEven assuming the origin server is HTTPS, the content is decrypted while it's on the edge server. The whole path secured, but it's still MITM'd. That's old news, but now that server is in China, I presume.
- nailer 11y agoYes, Cloudflare can view the unencrypted content if the customer encrypts, but I think that's less interesting than allowing a customer to choose not to encrypt over the internet.