• mox@lemmy.sdf.org
    link
    fedilink
    English
    arrow-up
    20
    ·
    22 hours ago

    And when Cloudflare is the proxy for a web site, it’s Cloudflare that provides the HTTPS connection, meaning that you don’t actually have an encrypted channel directly to the site. Cloudflare is the man-in-the-middle eavesdropping on all of your communications with that site. Your bank transactions, your medical records, your personal messages, etc.

    • msage@programming.dev
      link
      fedilink
      English
      arrow-up
      2
      ·
      4 hours ago

      Lol what?

      I thought they just did rate limiting and such, I can’t believe they do SSL as well.