3 ms·
It seems I meant "Flexible SSL" instead of "Universal SSL". According to the main website, flexible SSL is not secured. https://www.cloudflare.com/ssl https://w
by r1ch 11y ago
It seems I meant "Flexible SSL" instead of "Universal SSL". According to the main website, flexible SSL is not secured. https://www.cloudflare.com/ssl https://www.cloudflare.com/ssl
The beta test of a Cloudflare CA for "Full SSL" is a big improvement over accepting any self-signed certificate, but I still think "Flexible SSL" should not be a thing.
- xyzzy123 11y agoIt misleads users, for a start. I get the business case (the whole point is that SSL is hard for a large class of server admins). Also it does help for e.g. users coming in via tor or un-trusted networks. But dammit, I still can't bring myself to like it.