Re:Stay Away from Cloudflare (2017)
by edaemon on Thursday June 17, 2021 @01:56PM
(#27542419)
The criticism regarding Cloudflare as an MITM is odd:
> The connection is encrypted between the browser and CloudFlare, and between CloudFlare and the website if the website has a SSL certificate, but the communication in-between remains completely visible to CloudFlare.
This critique applies to all content delivery networks. CDNs can't deliver content if they can't see the request and response. That visibility is a problem in certain use cases, but in those cases you simply shouldn't use a CDN.
> The connection is encrypted between the browser and CloudFlare, and between CloudFlare and the website if the website has a SSL certificate, but the communication in-between remains completely visible to CloudFlare.
This critique applies to all content delivery networks. CDNs can't deliver content if they can't see the request and response. That visibility is a problem in certain use cases, but in those cases you simply shouldn't use a CDN.