Regardless of whether or not you provide your own SSL certificates, cloudflare still uses their own between their servers and client browsers. So any SSL encrypted traffic is unencrypted at their end before being re-encrypted with your certificate. How can such an entity be trusted?

  • spottyPottyOPB
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 year ago

    You trust your employer, don’t you friend citizen?

    This is exactly the original point I was trying to make regarding cloudflare.

    The point that i take from this tongue-in-cheek sentence of yours is that no, we should absolutely not trust our employer with our unencrypted traffic.

    But then on the other hand there are loads of people on here saying that, yes, of course we should trust cloudflare with having access to all of the data flowing through it.