4 ms·
But the traffic after cloudflare's proxy is plaintext right? I know CloudFlare has better thing to do than sniffing websites but I don't see the point of insta
by atmosx 11y ago
But the traffic after cloudflare's proxy is plaintext right?
I know CloudFlare has better thing to do than sniffing websites but I don't see the point of installing an SSL certification using clouflare or any other third-party which will handle traffic the way they do. You don't own the certificate, they do.
- biot 11y agoThat's one option; they also offer strict SSL on both sides of the connection: https://www.cloudflare.com/ssl/ https://www.cloudflare.com/ssl/
- iokanuon 11y agoHow would that work if Github pages don't support SSL?
- biot 11y agoGitHub supports SSL for *.github.io so you can have your custom domain with SSL on CloudFlare, and CloudFlare can proxy https://example.github.io/.. https://example.github.io/... on the other side. eg: End User <--> https://example.com https://example.com <--> CloudFlare <--> https://example.github.io https://example.github.io
- sneak 11y agoRewriting the Host header in this way requires a non-free CloudFlare plan.
- cben 11y agoIt won't. http://stackoverflow.com/a/28457335/239657 http://stackoverflow.com/a/28457335/239657 (1) Last I checked, cloudflare's "Strict SSL" mode only accepts from the backend a cert for the custom domain you're trying to serve, not accepting the github.io cert. A pity they don't let me configure what cert(s) to accept from the backend... (2) In addition, Github have indicated their current github.io SSL is not actually end-to-end secure — it's only secure from their CDN (Fastly) but their link to the CDN is unsecure. So there is absolutely zero you can do — Cloudflare or anything else — to make GH Pages end-to-end secure on custom domains.