3 ms·
Even assuming the origin server is HTTPS, the content is decrypted while it's on the edge server. The whole path secured, but it's still MITM'd. That's old news
by logn 11y ago
Even assuming the origin server is HTTPS, the content is decrypted while it's on the edge server. The whole path secured, but it's still MITM'd. That's old news, but now that server is in China, I presume.
- nailer 11y agoYes, Cloudflare can view the unencrypted content if the customer encrypts, but I think that's less interesting than allowing a customer to choose not to encrypt over the internet.