Cloudflare “Flexible” SSL Misleading

Re:Cloudflare “Flexible” SSL Misleading by josephcsible on Saturday November 27, 2021 @02:31PM (#29362691)

Flexible SSL is basically equivalent to visiting a totally insecure site over a VPN instead of directly. There's a few advantages to it. Off the top of my head:

1. It protects the privacy of the client still. Nobody can tell which page a given IP address is looking at on a site, since once the traffic is decrypted, it's no longer associated with the originator.

2. Most snooping and MITM attacks happen towards the client end of the connection, which this would protect from.

It's definitely not appropriate for sending sensitive data like credit card numbers, though.

[ Parent | on HN ]

Re:Cloudflare “Flexible” SSL Misleading by labawi on Saturday November 27, 2021 @04:45PM (#29363878)

(1) - the source IP won't be in the IP header, but is usually added to the HTTP headers so endpoint and TLAs will see who is connecting.

(2) - have to concur, though sadly, you will obviously be exposed (and identifiable) to institutional meddlers with no warning.

[ Parent | on HN ]