3 ms·
You missed this line: “This is from a CDN who has a level of access unmatched by their rivals. CloudFlare are becoming the defualt DNS for browsers and have a V
by lathiat 2y ago
You missed this line: “This is from a CDN who has a level of access unmatched by their rivals. CloudFlare are becoming the defualt DNS for browsers and have a VPN service.”
They’ve got a pretty large vector for intercepting real traffic from a substantial number of users.
- bawolff 2y agoI mean, if that is the concern, maybe don't give them a cert in the first place.
- 5e92cb50239222b 2y agoLots of people use CloudFlare purely as a registar and DNS hoster because they sell domains at cost. Domains are quite expensive already for what they are. This is enough to trigger certificate issuance on your behalf. You don't have to use any add-on features. Maybe even just registering a domain is enough, I'm not sure. I certainly didn't "give them" any certificates, I don't have A/AAAA/CNAME records on several of my domains, and never enabled proxying traffic through the rest of them. The certs have been issued regardless. I don't see this as a conspiracy theory, though. They want to sell you the whole package and don't want to support freeloaders like me who are only there for the "cheap" domains. That's reasonable, if unfortunate.