3 ms·
How is this different than trusting the website's own load balancer, which might terminate the SSL connection and relay unencrypted traffic to the servers?
by scott_karana 12y ago
How is this different than trusting the website's own load balancer, which might terminate the SSL connection and relay unencrypted traffic to the servers?
- Tepix 12y agoThe unencrypted connection between the load balancer and the backend server would be taking place behind a firewall.
- scott_karana 12y agoSince we're talking about issues with bad devops (unencrypted between Cloudflare and appserver), the same bad devops could apply here too. It wouldn't be the first time that someone left an "internal" appserver on a public IP, or a firewall rule was miswritten, etc.