Timeline for Is CloudFlare full SSL less secure than Cloudflace full (strict) SSL?
Current License: CC BY-SA 4.0
3 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Feb 10, 2023 at 22:04 | comment | added | Evgeny Yudin | Using a Full SSL provides encryption between the user and Cloudflare servers, but it does not guarantee that traffic will not be intercepted by a rogue party that may respond to the IP range. On the other hand, using strict mode in Cloudflare provides additional security, which ensures that the traffic is being sent to the correct server. It's recommended to use strict mode in Cloudflare for improved security. But strict mode may cause compatibility issues with some older browsers and operating systems, so it's important to thoroughly test your site before enabling it. | |
Nov 4, 2019 at 10:32 | comment | added | Ferrybig | With full SLL, you are still vulnerable if a rouge party on the internet publishes the wrong IP range, and actually responds to that traffic (very unlikely, but easier to than on the scale of hijacking the cloudflare ip's). If you use strict ode, you are guarded against this | |
Nov 3, 2019 at 23:57 | history | answered | Evgeny Yudin | CC BY-SA 4.0 |