3 ms·
not always. as we've learned from the NSA disclosures, there are many layers of indirection.
by justcommenting 12y ago
not always. as we've learned from the NSA disclosures, there are many layers of indirection.
- deleted 12y ago[deleted]
- hayksaakian 12y agoWould you say its better than plain HTTP? Or is the false sense of true security a bigger detriment?
- justcommenting 12y agoi think it really depends on your threat model
- aidenn0 12y agoThis is important; there are cases of "just plain insecure" but other than that, it's very nuanced. How about you randomly generate and write all your passwords down on a piece of paper in your wallet? For many threat models, that's far more secure than even using a password manager. For other threat models it's far less secure than using a password manager. Other than things that are just flat-out broken "more-secure" and "less-secure" don't exist without qualification.
- Animats 12y agoOr is the false sense of true security a bigger detriment? That's a really tough call. Cloudflare makes no security guarantees. They don't even commit to keeping your public key secure when you give it to them. That's a bad sign. One wonders how they fund their free MITM service.