Privacy

51573 readers

552 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 7 years ago

MODERATORS

I imagine that instead of beating TLS, state actors work with Cloudflare and the other CDNs who terminate the connection to listen in. (lemmy.ml)

submitted 2 weeks ago by lntl@lemmy.ml to c/privacy@lemmy.ml

19 comments fedilink hide all child comments

I was orginally going to post to c/showerthoughts.... but then I thought it might fit in better here.

you are viewing a single comment's thread
view the rest of the comments

[–] deadbeef79000@lemmy.nz 36 points 2 weeks ago (1 children)

The CDN's are the MitM.

[–] ScoffingLizard@lemmy.dbzer0.com 1 points 5 days ago* (last edited 5 days ago) (1 children)

What exactly are the CDNs?

[–] deadbeef79000@lemmy.nz 1 points 5 days ago (2 children)

The Man in the Middle (MitM).

I.e. if they're terminating TLS and then forwarding to your TLS servers then they are capable of inspecting all the traffic to and from your service.

This is exactly what a MitM attack in is.

[–] ScoffingLizard@lemmy.dbzer0.com 1 points 7 hours ago

What if we just blocked all the cdns? I think I've locked a few out of my domain.

[–] ScoffingLizard@lemmy.dbzer0.com 2 points 3 days ago (1 children)

This sounds like it defeats the purpose of a private DNS. At least there is VPN.

[–] deadbeef79000@lemmy.nz 1 points 3 days ago

A VPN isn't going to protect you from CloudFlare being compromised and you'll never even know.

Likewise a private DNS will still be resolving to the CF addresses.