Re:New Tools for Detecting HTTPS Interception
by tonyztan on Monday March 18, 2019 @06:24PM
(#19425973)
> "untargeted national snooping"
While I do not disagree with your sentiment, there have been cases of untargeted national snooping/censorship affecting sites with flexible SSL because governments can and often do sit between the local Cloudflare server and the origin.
I've also been hoping that Cloudflare would add a header indicating the backend encryption status, so that we can look at how sites are configured and whether any "important" sites are using flexible SSL:
While I do not disagree with your sentiment, there have been cases of untargeted national snooping/censorship affecting sites with flexible SSL because governments can and often do sit between the local Cloudflare server and the origin.
https://medium.com/@karthikb351/airtel-is-sniffing-and-censo...
I've also been hoping that Cloudflare would add a header indicating the backend encryption status, so that we can look at how sites are configured and whether any "important" sites are using flexible SSL:
https://github.com/cloudflare/claire/issues/17