2 ms·
Is an SSL-terminating load balancer an MITM attack?
by jnbiche 11y ago
Is an SSL-terminating load balancer an MITM attack?
- nailer 11y agoI think the parent is referring to CloudFlare not requiring SSL between CloudFlare and their customers. An SSL-terminating load balancer is in plaintext between the LB and your servers, whereas CloudFlare Universal SSL can be plaintext over the internet. Since the latter still shows users it's a secure connection, it would be reasonable for CF to require HTTPS between themselves and their customers. Last time I asked CF about this, their answer was "yes, but not our problem".