3 ms·
It's especially important to realize that Cloudflare offering free TLS for everyone isn't enough to prevent javascript-based DDOS, if you don't make sure that t
by rakoo 12y ago
It's especially important to realize that Cloudflare offering free TLS for everyone isn't enough to prevent javascript-based DDOS, if you don't make sure that third-party resources are also behind TLS.
- parryjacob 12y agoIt does a lot considering the fact that most resources on a page served over HTTPS also have to be served over HTTPS.
- thirsteh 12y agoAll of them, if you want to do it right. Biggest reason inactive mixed content is allowed at all is that blocking it would break too much.
- kpcyrd 12y agoI think "use our free TLS" is directed towards the people who host scripts that get embedded by people, like baidu. Embedding scripts that are hosted behind cloudflare is a terrible idea though.