3 ms·
So you're using Cloudflare. Do you have Strict SSL enabled? If not, you don't have authenticated encryption. Hiding the problem is not a solution. If GitHub doe
by strcat 10y ago
So you're using Cloudflare. Do you have Strict SSL enabled? If not, you don't have authenticated encryption. Hiding the problem is not a solution. If GitHub doesn't let you set a custom certificate, Cloudflare isn't a solution because they don't have a way to pin a certificate rather than relying on CA authentication.
- xrisk 10y agoYes, I believe you can enforce HTTPS using Cloudflare. I don't know about it because I don't manage the domain, I simply use the subdomain.