3 ms·
Data is only 'in the clear' inside a machine. All machine to machine communication in Cloudflare is encrypted with mutually authenticated TLS. If a user chooses
by jgrahamc 10y ago
Data is only 'in the clear' inside a machine. All machine to machine communication in Cloudflare is encrypted with mutually authenticated TLS. If a user chooses to not encrypt the back haul from Cloudflare to their origin then, sure, that's not encrypted, but we offer free certificates for origin machines so there's no reason to use that option. If you don't like Cloudflare's Origin CA then use Let's Encrypt on the origin server.
- aeronautic 10y agoThanks so much for clarifying. We use your service - would recommend in a heartbeat.
- daxorid 10y agoEven so, there's nothing preventing a LE or court order from compromising the confidentiality of your customers, no matter how hard you work on minimizing the scope of your cleartext domains. I know that you, Prince, rdl, and others are serious about security and privacy, but let's be honest here: If the Feds come a-knocking, you will comply. It's not that we don't trust you or your competence. You're just not immune to the jackboot threat model.
- eastdakota 10y agoActually, we'd fight like crazy legally — as we've demonstrated repeatedly and successfully — and have implemented our technical systems to make it difficult to reveal anything even if we were ordered to. Moreover, we've included warrant canaries in our Transparency Policy so you can know if anything has changed: https://www.cloudflare.com/transparency/ https://www.cloudflare.com/transparency/ See section "Some things we've never done."
- maxerickson 10y agoHave you ever received a legal order not to change your warrant canaries? Have you ever received a legal order to not disclose that you have been ordered to not change your warrant canaries? And so on.