3 ms·
User's computer => Encrypted => Sent over the internet => Mozilla's public servers => Mozilla intranet gateway => Mozilla non-internet-facing server => Decrypte
by scrollaway 8y ago
User's computer => Encrypted => Sent over the internet => Mozilla's public servers => Mozilla intranet gateway => Mozilla non-internet-facing server => Decrypted here
It doesn't say the server is completely offline. It can be connected to through a server which can connect to both that server and the wider internet, but the machine in question cannot.
- mygo 8y agohopefully the server connected to the wider internet can only receive from the wider internet and not send anything to the wider internet. Otherwise it can just be used as a proxy to the server that’s not connected to the internet.
- joombaga 8y agoHmm. If I was describing a server behind a bastion host I'd feel dishonest saying it's "not connected to the wider internet".
- bashinator 8y agoI agree. A more honest and accurate way of putting it would be, “not accessible from the wider Internet.” On the other hand, with immutable servers, giving them no route to the wider Internet actually could be possible.