3 ms·
It's not just S3 though. Lots of not-quite fully-featured services like App Engine, GitHub pages, and Heroku benefit from Cloudflare's SSL and other configurati
by bckygldstn 10y ago
It's not just S3 though. Lots of not-quite fully-featured services like App Engine, GitHub pages, and Heroku benefit from Cloudflare's SSL and other configuration options. For many use cases security is a tradeoff, and trusting one more US-based company can be worthwhile for both users and site owners.
- bad_user 10y agoSetting up your own Ubuntu instance on DigitalOcean (or similar) along with Nginx and Let's Encrypt certificates is cheap and easy to do. I can't figure out why people use GitHub Pages for hosting static pages for their projects, without end-to-end encryption. It's actually quite a problem, given libraries are a primary target for malware. And if you can work with Git, then you also can also do "apt install nginx". The best part about a VPS is that you can do more things with it, like having your own VPN, or XMPP server. And the web is full of step by step tutorials. And you may invoke the convenience of it, but that convenience comes with a broken security model.
- K0nserv 10y agoSee above about cost and labour required. If you stick with the github.io domain you still have free SSL termination.