3 ms·
> The route from cloudflare to the server is without ssl. That's a user preference, but the most common configuration uses SSL on the back-end (Cloudflare to s
by duskwuff 5y ago
> The route from cloudflare to the server is without ssl.
That's a user preference, but the most common configuration uses SSL on the back-end (Cloudflare to server) connection.
> Since i don't think they can cache things when you use your own SSL certificate.
I don't see any reason why that would be the case.
- NicoJuicy 5y agoSince cloudflare doesn't have the private key in this case.
- duskwuff 5y agoUnder most configurations, Cloudflare does have the private key. They act as an HTTP proxy, not a TLS proxy. Cloudflare does support a "keyless SSL" mode [1] for enterprise customers, but this only applies to the certificate private key -- the session key for each TLS session is still under Cloudflare's control, so they still have access to the contents of the HTTPS session. [1]: https://www.cloudflare.com/ssl/keyless-ssl/ https://www.cloudflare.com/ssl/keyless-ssl/