privacy

10004 readers

111 users here now

Big tech and governments are monitoring and recording your eating activities. c/Privacy provides tips and tricks to protect your privacy against global surveillance.

Partners:

community.nicfab.it/c/privacy

founded 4 years ago

MODERATORS

Kokomheart@lemmy.ca

QuentinCallaghan@sopuli.xyz

altair222@beehaw.org

Cloudflare: Why I left lemmy.world to join another instance (lemmy.ca)

submitted 23 hours ago by TerdFerguson@lemmy.ca to c/privacy@lemmy.ca

15 comments fedilink hide all child comments

Sad to see. We should all know cloudlfare decrypts our data before it reaches the service it protects. A perfect surveillance man-in-the-middle.

I was happy to find a home in the fediverse that uses Anubis instead.

https://anubis.techaro.lol/

you are viewing a single comment's thread
view the rest of the comments

[–] AcidBurn@lemmy.dbzer0.com 1 points 9 hours ago* (last edited 7 hours ago) (1 children)

Was thinking about it incorrectly when I wrote this comment.

~~If they use SSL/TLS between their host server and Cloudflare, then Cloudflare can’t decrypt your traffic as you’re suggesting.~~

[–] TerdFerguson@lemmy.ca 2 points 8 hours ago* (last edited 8 hours ago)

Cloudflare is the SSL/TLS endpoint between you and the application.

When you use Cloudflare, data is encrypted between a client and Cloudflare (using 'their' SSL cert), they unencrypt it and inspect so they can process it, caching etc, then it' can be encrypted between Cloudflare and the backend using your own backend certificate.

So Cloudflare can see everything, its required for them to do what they do