News for hackers. Stuff that matters.

A comment on Let's Encrypt Root Trusted by All Major Root Programs. Parent comment

Re:Let's Encrypt Root Trusted by All Major Root Programs by nullify88 on Monday August 06, 2018 @03:21PM (#17700810)
> My beef with CF is that I can not see which sites are behind CF.

Sites behind CF usually include two headers in the responses: cf-ray and expect-ct.

If you see these headers, it's almost certain the response is coming from CF. So its likely those extensions are doing that, perhaps you might be able to verify the source code.

If the thought of connecting to a site hosted by Cloudflare absolutely disgusts you. Vist https://www.cloudflare.com/ips/ for a list of IPs that you can block.

[ Parent | on HN ]
Re:Let's Encrypt Root Trusted by All Major Root Programs by auslander on Monday August 06, 2018 @03:26PM (#17700874)
Yes, thanks, I knew about headers and ips. Disgust is too strong word, aware is better :) some info may be sensitive and it goes in plaintext via CF. Its time to write my first extention, sigh.
[ Parent | on HN ]