News for hackers. Stuff that matters.

A comment on Https hurts users far away from the server. Parent comment

Re:Https hurts users far away from the server by throwawaysed on Friday March 10, 2017 @12:50PM (#13840493)
Cloudflare is unquestionably a source of pure, unencrypted traffic for the govt.

Does anyone remember a few years ago when Google found out through leaks that the govt was wiretapping it's private traffic between datacentres?

What makes you so naive to think that the govt isn't sniffing every single page on cloudflare?

[ Parent | on HN ]
Re:Https hurts users far away from the server by Bartweiss on Friday March 10, 2017 @01:22PM (#13840756)
A 'counterpoint', such as it is. What makes you think that isn't happening to any 3rd party host you can name? Why single out Cloudflare as adding risk to sites that are hosted on AWS already?

The risk here is real, but it's much more pervasive than one data handler.

[ Parent | on HN ]
Re:Https hurts users far away from the server by jacquesm on Friday March 10, 2017 @01:55PM (#13841018)
You seem to mis-understand how cloudflare works. They allow an insecure host to pose as a secure one and the traffic between cloudflare and the insecure host is not encrypted.

That problem would not exist on 'any 3rd party host'.

[ Parent | on HN ]
Re:Https hurts users far away from the server by manigandham on Friday March 10, 2017 @02:34PM (#13841367)
CF is the same as any other CDN with TLS termination. Every host that provides a load balancer, or a server, or some other internal network connection like a VPN, can be compromised. Cloudflare is nothing special in this regard.
[ Parent | on HN ]