3 ms·
They can just forward the encrypted bytes (I don't know if that's how they actually do it). Cloudflare does mitm decryption in order to inject its own code and
by progval 7y ago
They can just forward the encrypted bytes (I don't know if that's how they actually do it). Cloudflare does mitm decryption in order to inject its own code and captcha in the pages.
- lugubris 7y agoIf they just forward the encrypted bytes then I don't see any reason to send your traffic to cloudflare for https connection, makes sense for http connections. I think its like how they do it for cloudflare's cdn (user -> cloudflare -> server) so mitm'ing b/w user and server, again no need for this. I think they should ignore https traffic and use this for http traffic only (very less?).