3 ms·
> a way of getting the benefits of a CDN without turning over the keys to your entire kingdom to a third party. https://blog.cloudflare.com/keyless-ssl-the-nit
by ignoramous 6y ago
> a way of getting the benefits of a CDN without turning over the keys to your entire kingdom to a third party.
https://blog.cloudflare.com/keyless-ssl-the-nitty-gritty-technical-details/ https://blog.cloudflare.com/keyless-ssl-the-nitty-gritty-tec... is a thing now.
- icebraining 6y agoThe session key, which is given carte blanche by the TLS cert to sign whatever it wants under the domain, is still controlled by Cloudflare. To put it simply, Cloudflare still controls the content. The proposal here would avoid that, by allowing Cloudflare to transmit only pre-signed content.
- Spivak 6y agoYour browser would have a secure tunnel to CloudFlare which is encrypted with their key. But then that tunnel would deliver a bundle of resources verified your browser differently that CF doesn’t have the key for.