3 ms·
Wouldn't this mean granting Cloudflare access to all resources available? Does not sound like a very secure infrastructure concept.
by tpetry 9y ago
Wouldn't this mean granting Cloudflare access to all resources available? Does not sound like a very secure infrastructure concept.
- _wmd 9y agoDon't worry, the industry moves so fast that entire generations have come and retired in the 11 months since they last leaked private data all over the Internet (Don't even get me started on FlexSSL!)
- antoinefink 9y agoFor small companies, this can be a valuable tradeoff. For example, we just secured a background processing service using Cloudflare Access; very practical and without too much security tradeoffs.
- tinus_hn 9y agoNote that there are thousands of certificate authorities that hold the keys to the same resources. The threat is real but difficult to avoid.
- lazyjones 9y agoCloudflare also reserves the right to investigate you and your data. See https://www.cloudflare.com/terms/ https://www.cloudflare.com/terms/ section 11. I'd say this goes way beyond the theoretical means of (illegal) access CA might have.
- lazyjones 9y agoDon't forget about the identity providers you'll rely on - they can also impersonate you.