3 ms·
Is there a way to know when the encrypted content i send to a site is also being provided to Cloudflare?
by xk_id 3y ago
Is there a way to know when the encrypted content i send to a site is also being provided to Cloudflare?
- viraptor 3y agoCheck the whois entry for the IPs that domain resolves to. If they belong to CloudFlare, they can see the plaintext traffic. Same for Akamai, Cloudfront and others.
- tick_tock_tick 3y agoNo, just like there is no way to know if a site not fronted by cloudflare decided to send all traffic their after.
- tcmb 3y agoIsn't the SSL certificate being issued by Cloudflare a giveaway? I'm guessing it's a sufficient condition, bit not a necessary one. I.e, a could be using Cloudflare's WAF with a SSL cert issued by somebody else.
- judge2020 3y agoCloudflare can issue from Google Trust Services/Digicert with ACM[0] and often does even without ACM (although maybe only for Business/Enterprise domains). 0: https://developers.cloudflare.com/ssl/edge-certificates/advanced-certificate-manager/ https://developers.cloudflare.com/ssl/edge-certificates/adva...
- judge2020 3y agohttps://judge.sh/cdn-cgi/trace https://judge.sh/cdn-cgi/trace https://news.ycombinator.com/cdn-cgi/trace https://news.ycombinator.com/cdn-cgi/trace Every Cloudflare site will respond to this URI.