3 ms·
"Cloudflare undermines that entirely. " In their defense, this is a flaw of the whole SSL/TLS security model. I think even Google did that before Snowden, pres
by zzzcpan 10y ago
"Cloudflare undermines that entirely. "
In their defense, this is a flaw of the whole SSL/TLS security model. I think even Google did that before Snowden, presented you with https:// https:// urls but proxied everything in clear text (they claim they don't do it now). Still, you can be pretty sure that many https websites might pass traffic in clear text to their backends and not necessary take security even a little bit seriously.
- r1ch 10y agoGoogle at least proxied everything over their own private fiber. Cloudflare proxies it over the public internet on a long route (since they terminate SSL as close to the client as possible).
- problems 10y agoPrivate fiber in other people's datacenters. Better I suppose, but not much.
- toomuchtodo 10y agoUnencrypted over private fiber and unencrypted over the public internet are worlds apart.
- problems 10y agoThat has nothing to do with using fiber vs internet though. EDIT: Original comment said he could pull content off Google results. To respond to the new one: No, they're not worlds apart when you're on the backbone. They still go through other people's datacenters and that's what causes the problem - we're not talking about stuff that goes over wifi or corporate networks here - we're talking generally just big ISPs in both cases.