News for hackers. Stuff that matters.

A comment on Let's Encrypt Root Trusted by All Major Root Programs. Parent comment

Re:Let's Encrypt Root Trusted by All Major Root Programs by CiPHPerCoder on Monday August 06, 2018 @02:38PM (#17700284)
> Ok. But if they use Cloudflare, which MITMs traffic, all their users data is in plaintext to Cloudflare.

Using Cloudflare for DNS, and only DNS, doesn't subject you to this.

If you decide to use their reverse proxy features, then sure, the MITM criticism applies.

[ Parent | on HN ]
Re:Let's Encrypt Root Trusted by All Major Root Programs by leesalminen on Monday August 06, 2018 @05:45PM (#17702039)
That's optional though, right? IIRC, you could still have SSL termination occur on your end but you lose tons of features which would require CF MiTM.
[ Parent | on HN ]
Re:Let's Encrypt Root Trusted by All Major Root Programs by CiPHPerCoder on Monday August 06, 2018 @07:22PM (#17702638)
Yes, that's optional.
[ Parent | on HN ]