2
How are so many sites OK with using cloudflare when they are basically a MITM? (alien.top)
submitted 2 years ago by [B] to c/main@selfhosted.forum
87 comments fedilink hide all child comments
 

Regardless of whether or not you provide your own SSL certificates, cloudflare still uses their own between their servers and client browsers. So any SSL encrypted traffic is unencrypted at their end before being re-encrypted with your certificate. How can such an entity be trusted?

you are viewing a single comment's thread
view the rest of the comments
[–] [S, B] 1 point 2 years ago

Because it's "everyone's MITM" it would make it a perfect spot for state actors to tap into in order to surveil pretty much everything without anyone being able to notice.

Yep, that's my main point

  • permalink
  • fedilink
  • source
  • parent