5 ms·

>give secret ssl key to cloudflare meh

• mooism2 13y ago
  What are you quoting from? That text doesn't appear in the linked article.
  • drill_sarge 13y ago
    This is how SSL works if you use Cloudflare. You have to hand them your private key. Also the article doesn't state this, I would guess they mean that everyone on their service should use ssl (maybe they will enable ssl on their free plan or something). I may be wrong, lets see what they will write on their blog.
    • mooism2 13y ago
      My understanding is that they generate their own ssl key and certificate to use on your site. So they mitm your site, yes (I don't see how their service could work otherwise). If you're worried that they could enable the NSA to decrypt all your site's traffic: yes, they could do that. But if you're worried that they could enable the NSA to decrypt all your site's past traffic: no, I don't see how they could do that.