News for hackers. Stuff that matters.

A comment on How to Bypass Cloudflare: A Comprehensive Guide. Parent comment

Re:How to Bypass Cloudflare: A Comprehensive Guide by gingerlime on Sunday September 18, 2022 @02:58PM (#32890369)
> or if https://developers.cloudflare.com/ssl/origin-configuration/o... is used.

How is using CF’s origin CA preventing the connection to the real backend in order to bypass Cloudflare? you cam just ignore the SSL error couldn’t you?

[ Parent | on HN ]
Re:How to Bypass Cloudflare: A Comprehensive Guide by kevincox on Sunday September 18, 2022 @04:34PM (#32891249)
They probably meant to link https://developers.cloudflare.com/ssl/origin-configuration/a... where Cloudflare uses a client TLS certificate to pull from the origin and the origin should be configured to reject requests without a client certificate.
[ Parent | on HN ]
Re:How to Bypass Cloudflare: A Comprehensive Guide by temp0826 on Sunday September 18, 2022 @03:01PM (#32890397)
In addition, I think CF provides a list of IPs to whitelist to only allow access from their servers.
[ Parent | on HN ]