4 ms·
Cloudflare blocks denial of service attacks, too, which is probably important for tools in the security space, and blocking denial of service attacks means maki
by wlonkly 4y ago
Cloudflare blocks denial of service attacks, too, which is probably important for tools in the security space, and blocking denial of service attacks means making sure that attackers don't know how to bypass Cloudflare and hit your origin directly.
If you let things go direct to the origin, then you're giving away information about where the origin is, even if the things are only Stripe.
- ufmace 4y agoThat's true, but it seems pretty low-risk to me, since only Stripe and maybe a few other services you're integrating with actually know the DNS name. It's possible someone could discover it and attack it, but I think I'd wait to see an attack actually happen that couldn't practically be mitigated otherwise before moving it behind Cloudflare etc.