News for hackers. Stuff that matters.

A comment on Ask HN: What's the actual fallout been from the Cloudflare bug?.

Re:Ask HN: What's the actual fallout been from the Cloudflar... by rini17 on Sunday March 05, 2017 @05:25PM (#13799179)
I would welcome if this incident shone light on possible Cloudflare alternatives. For example, it should be technically doable for DDoS protection service to only initially verify user is not a bot, and then merely tunnel unchanged SSL traffic directly between server and client. Does anyone do this?
[ Parent | on HN ]
Re:Ask HN: What's the actual fallout been from the Cloudflar... by grey-area on Monday March 06, 2017 @03:40AM (#13801486)
Another model which might work - don't take over customer dns, issue ephemeral tokens ( say 30 mins) for each ip classifying risk. Then the client site determines whether to drop connections, no tunnelling required.
[ Parent | on HN ]
Re:Ask HN: What's the actual fallout been from the Cloudflar... by rocqua on Monday March 06, 2017 @07:35AM (#13802259)
You still need to make a connection to drop it. You can DDOS just by making a lot of connections.
[ Parent | on HN ]