3 ms·
The person who wrote the second blog post you linked to here. I think it's not quite fair to say CF is MITMing, but rather there is the possibility of MITM. St
by stirling 12y ago
The person who wrote the second blog post you linked to here.
I think it's not quite fair to say CF is MITMing, but rather there is the possibility of MITM. Still, the biggest problem out there is the vast majority of sites that are still served over HTTP. Any easy and free solution to get more sites to move to HTTPS is well worth the MITM risk. CF is the best one now, and possibly Let's Encrypt when they launch. I would also place more trust in CF than unknown ISPs or people on unsecured networks.