News for hackers. Stuff that matters.

A comment on Cloudflare expands its government warrant canaries.

Re:Cloudflare expands its government warrant canaries by kernelPan1c on Tuesday February 26, 2019 @02:37PM (#19257592)
> "has never turned over their SSL keys or customers’ SSL keys to anyone;"

How would they be able to give up customers' SSL keys?

[ Parent | on HN ]
Re:Cloudflare expands its government warrant canaries by fivre on Tuesday February 26, 2019 @02:40PM (#19257612)
Customers on some plan can upload a certificate of their choice, and generally have to provide the key along with it. Keyless SSL exists, but isn't widespread.
[ Parent | on HN ]
Re:Cloudflare expands its government warrant canaries by kernelPan1c on Tuesday February 26, 2019 @03:13PM (#19257927)
Ah, I guess the point I'm missing is that with a 'serverless' setup, the cloud provider must have access to your private key? Unless you use some sort of key server setup (what they call Keyless SSL)
[ Parent | on HN ]
Re:Cloudflare expands its government warrant canaries by stedaniels on Tuesday February 26, 2019 @02:39PM (#19257604)
It means the ones they use for the customers site, versus the ones they use for their own site.
[ Parent | on HN ]