3 ms·
(disclaimer: my company does this too) TLS between users and a proxy protects users from lots of different attacks (including the lovely wpa stuff). It's usefu
by mrkurt 9y ago
(disclaimer: my company does this too)
TLS between users and a proxy protects users from lots of different attacks (including the lovely wpa stuff). It's useful, and the alternative is frequently "no TLS at all", not dyi.
Yes end-to-end is better. But you're still going to have to trust infrastructure providers along the way, whether it's at the proxy level or they can just read your disks.
Also I pretty much agree with everything you said about CF ...
- lmm 9y agoYou are usually going to have to trust some third parties, i.e. your datacenter provider (though even then, I'm a believer in locked cages etc.). But there's a difference between trusting a named third party and trusting the public internet between CF and your hosting.