Timeline for Do I have to pay a web hosting company for an SSL certificate?
Current License: CC BY-SA 4.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 8, 2021 at 1:56 | comment | added | Ángel | @8vtwo It depends on your threat model. Someone might not consider an issue that Cloudflare could MITM your connection (well, you are choosing to put them in the middle), just like your hosting could access anything sent there. Letting Cloudflare view the contents if they turned evil still seems better than letting anyone view the contents (note: the leg between Cloudflare and the hosting might still be cleartext). | |
| Feb 7, 2021 at 22:17 | comment | added | 8vtwo | Wouldn't that defeat the purpose of an SSL certificate if a company you really don't know could Man-In-The-Middle your website at will? | |
| Feb 7, 2021 at 0:29 | comment | added | Anunay | Just to be more clear to OP: CLOUDFLARE can see all of your traffic completely unencrypted. Either you use origin certificates or not. | |
| Feb 6, 2021 at 18:54 | comment | added | davidgo | I changed "fully encrypted" to "end-to-end" encrypted in your post as I suspect it more clearly expresses your thought??. think your observation of using a reverse proxy provider like Cloudflare is a useful observation. +1 | |
| Feb 6, 2021 at 18:51 | history | edited | davidgo | CC BY-SA 4.0 |
changed fully encrypted to end-to-end encrypted.
|
| Feb 6, 2021 at 13:27 | review | First posts | |||
| Feb 6, 2021 at 14:52 | |||||
| Feb 6, 2021 at 13:26 | history | answered | Edd | CC BY-SA 4.0 |