4 ms·
I see a lot of people bashing CloudFlare, but to be fair: 1. Thanks to them many sites got SSL and sniffing your local network/ISP is source of majority of the
by jakozaur 10y ago
I see a lot of people bashing CloudFlare, but to be fair:
1. Thanks to them many sites got SSL and sniffing your local network/ISP is source of majority of the problems.
2. Some SSL is better than no SSL, though it can also create illusion of full security.
3. You can configure encryption between CloudFlare and your origin. You probably should do that.
4. CloudFlare this year (May 2016) announce better tooling to encrypt between origin and their own CDN servers:
https://blog.cloudflare.com/cloudflare-ca-encryption-origin/ https://blog.cloudflare.com/cloudflare-ca-encryption-origin/
- hueving 10y agoOr you could get a let's encrypt certificate and have actual security for free.
- lmm 10y ago> 2. Some SSL is better than no SSL, though it can also create illusion of full security. In this scenario the illusion is a much bigger problem than the benefits. If I make a request over https I do not expect my traffic to be sent unencrypted over the open internet.