3 ms·
Not sure I'm following you. Probably because I didn't use SSL on cloudflare before, so I don't know about any verification file. How does that work? I guess bef
by dividuum 12y ago
Not sure I'm following you. Probably because I didn't use SSL on cloudflare before, so I don't know about any verification file. How does that work? I guess before serving SSL traffic for a domain they verify both that the nameserver for a domain is actually one of cloudflares nameservers AND they test for the presence of some kind of signed file that has to be reachable on the domain you added?
- deleted 12y ago[deleted]
- dividuum 12y agoUnderstood. But how does that work in cloudflares case? Since they magically upgrade 2 million websites by the end of the day I cannot imagine all those sites have those verification files available.
- pmh 12y agoSorry, I deleted my comment since I thought the issue was better explained/covered downthread: https://news.ycombinator.com/item?id=8382419 https://news.ycombinator.com/item?id=8382419 As for spoofing the DNS record, I was under the impression that you switched your domain's nameservers to point at Cloudflare and that's what's used to verify that you control the domain.
- nknighthb 12y agoUh, CloudFlare controls all the traffic between your site and the world. They can automatically put whatever they want wherever they want on your site.
- innocenat 12y agoThe verification file are needed by CA issueing cert. I don't think said CA are on your spoofed wifi.