3 ms·

So, dumb question: Why is TLS pushed so heavily if everyone is expected to use a CDN anyway, which would be in a position to see and modify all traffic? Or put

by xg15 4y ago

So, dumb question: Why is TLS pushed so heavily if everyone is expected to use a CDN anyway, which would be in a position to see and modify all traffic? Or put differently, why are ISPs hostile entities against which web traffic must be protected, but CDNs and hosting providers are just fine?

DoctorOW 4y ago
IMHO it's because ISP is a much more broad term. When I connect from my University, I have to either use TLS or trust every step of the network from whatever commerical ISP they use, to the whole network infrastructure they built to the building, to the other devices using the same router as me. When I trust Cloudflare, my data is encrypted whenever it's not directly in their hands eliminating those other steps.