News for hackers. Stuff that matters.

A comment on Building a fast, secured and free static site in less than three hours. Parent comment

Re:Building a fast, secured and free static site in less tha... by icebraining on Wednesday September 13, 2017 @04:31AM (#15236497)
Right, but Cloudflare doesn't actually check if the cert is valid, unless you enable Strict mode, which you can't because you'd need Github to serve a cert for your own domain.
[ Parent | on HN ]
Re:Building a fast, secured and free static site in less tha... by schrodinger on Wednesday September 13, 2017 @11:45AM (#15239392)
Are you sure? Wouldn't it check to see that the cert is valid for github.com, not for your own domain, since that's the origin?

Edit: Looks like you're correct. Sorry!

[ Parent | on HN ]