4 ms·

Yes. I have said it before and I say it again: Cloudflare (and any other large CDNs) are a perfect setup for a MITM or a perfect target for a nation-state's sec

Yes. I have said it before and I say it again: Cloudflare (and any other large CDNs) are a perfect setup for a MITM or a perfect target for a nation-state's secret service.

sschueller 11y ago
Especially when cloudflare is governed by the laws of the US which includes the patriot act. How do we know this isn't already the case?
- sarciszewski 11y ago
  If your threat model includes intelligence agencies, set up your own HTTPS with HSTS and HPKP and don't use CloudFlare. Wow, that was easy.
  - tikums 11y ago
    So, basically anyone providing online services to customers then? Who's threat model should not include intelligence agencies? Online pet shop?
    - sarciszewski 11y ago
      It comes down to personal opinion more than anything.