3 ms·
Cloudflare offers the option to use plain HTTP to your backend. You can use TLS between Cloudflare and the origin server if you want to. I think it's a stretch
by michaelmior 8y ago
Cloudflare offers the option to use plain HTTP to your backend. You can use TLS between Cloudflare and the origin server if you want to. I think it's a stretch to say having that option is immoral. I can understand the concern however and it would be nice if there was at least a mechanism for making users aware of this.
- orblivion 8y agoThey give you the option of "Full (strict)" SSL. Or as I call it, "actual SSL". Snark aside, it at very least dilutes the brand of SSL to give the pretense that they're giving it to you with the default option, and give you the pretense of giving you something extra on top of it with the "full (strict)" option.
- manigandham 8y agoFull is still encrypted, just not checked to match the domain. For example, until recently many people used it to add a custom domain to sites hosted on github pages, but the connection from CF to GH was still encrypted.