Re:The NSA’s Hidden Spy Hubs in Eight U.S. Cities
by AgentME on Monday June 25, 2018 @05:29PM
(#17395968)
Even Cloudflare's "Full SSL" mode is a man in the middle: Cloudflare is the man in the middle who sees the plaintext of connections going through them.
Re:The NSA’s Hidden Spy Hubs in Eight U.S. Cities
by jstarfish on Monday June 25, 2018 @01:19PM
(#17394029)
It has its uses though, even if it's misused.
It's an easy box to check to pretend to offer HTTPS so you don't get penalized by Google. Before Let's Encrypt there was no free way to get a legit cert for your cat blog. Faking it via Flexible SSL was the next best thing.
Re:The NSA’s Hidden Spy Hubs in Eight U.S. Cities
by syshum on Monday June 25, 2018 @04:45PM
(#17395651)
This is false, there have always been ways to get a free DV cert, lets encrypt made it easier
Furhter before Lets Encrypt you would not have gotten dinged by google, Google only went that path when wide spread DV Certs where freely avaliable
Further still, the minor costs per year to get a paid DV cert should be factor when choosing to host your own content versus paying a 3rd party to do it, many of those 3rd parties provided SSL as part of their services.
There is zero need for a Man in the Middle for SSL,
Which sane people call Man in the Middle and should not be allowed at all. I have seen people doing this Flexiable SSL with Credit Card data and other PII believing it is "secure"
Cloudflare may have started out with security in mind but their new services centered around centralization of key services (dns) and this kind of security breaking product means IMO they are a net negative in the world of Information Security