4 ms·
It doesn't only work with Cloudflare but if you want to use a custom domain + SSL you need to use a provider that can proxy the request for you. GitHub and thei
by daenney 10y ago
It doesn't only work with Cloudflare but if you want to use a custom domain + SSL you need to use a provider that can proxy the request for you. GitHub and their Fastly setup won't serve custom certificates for you and the *.github.io certificate wouldn't be valid for your custom domain.
- ktta 10y agoThe last sentence didn't really make sense to me. I assume Fastly is some kind of backend tool? So why is it only working with CF? when I visit my custom domain, I get a cert from sni75146.cloudflaressl.com but no cert related to github to be seen anywhere. I'm assuming the cert I'm seeing is valid because I'm viewing the page on CF's CDN, or am I wrong? Well, I think I'm better off asking objective questions, so: 1. Can I change by DNS provider to something else and have SSL work? 2. Can I keep using CF and use my own cert, say from LetsEncrypt? 3. Do GitHub and CF have something in common/mutual agreement so this works?
- angry-hacker 10y agoNo no and no. Custom certs are for Cloudflares paying customers. You can use Cloudflares with any host. It's basically a reverse dns proxy.
- ktta 10y agoPlease see your sibling comment
- daenney 10y agoFastly is not "some backend tool". Two seconds of Google'ing would reveal to you that they're a Content Distribution Network, aka CDN. They're the ones actually serving the content hosted on *.github.io: host user.github.io user.github.io is an alias for github.map.fastly.net. github.map.fastly.net is an alias for prod.github.map.fastlylb.net. prod.github.map.fastlylb.net has address 151.101.12.133 Cloudflare doesn't act as a CDN in this case. What Cloudflare does is proxy the request for you, and by virtue of them terminating the request they can serve an SSL certificate for your domain (either handed out by them or custom if you pay them).
- ktta 10y agoPlease see your sibling comment
- syshum 10y ago>>So why is it only working with CF? Because CloudFlare is basically a MITM Attack.... that is authorized by the website owner. http://blog.ricardomacas.com/index.php?controller=post&action=view&id_post=4 http://blog.ricardomacas.com/index.php?controller=post&actio... https://stirling.co/blog/cloudflare-mitm/ https://stirling.co/blog/cloudflare-mitm/
- ktta 10y agoPlease see your sibling comment
- ktta 10y agoThanks for the replies everyone. Turns out my understanding of what CF exactly did was a bit iffy. @daenney - should've googled, and is that some online dig tool? or just you typing it that way? @syshum - Huh, I remember read up on it about how piratebay was inaccessible in India because of CF @angry-hacker - CF does offer free certs. I was actually wondering why only CF's certs worked with github pages, but not anyone else. But I now understand that any one who thinks they're visiting the page on github pages are actually visiting CF's server because CF cached my stuff on github. And because it is on CF's server, they are able to show a HTTPS cert. I hope I got it right this time