lntl@lemmy.ml to Privacy@lemmy.mlEnglish · 1 month agoI imagine that instead of beating TLS, state actors work with Cloudflare and the other CDNs who terminate the connection to listen in.message-squaremessage-square19linkfedilinkarrow-up164arrow-down11file-text
arrow-up163arrow-down1message-squareI imagine that instead of beating TLS, state actors work with Cloudflare and the other CDNs who terminate the connection to listen in.lntl@lemmy.ml to Privacy@lemmy.mlEnglish · 1 month agomessage-square19linkfedilinkfile-text
minus-squaredeadbeef79000@lemmy.nzlinkfedilinkarrow-up1·24 days agoThe Man in the Middle (MitM). I.e. if they’re terminating TLS and then forwarding to your TLS servers then they are capable of inspecting all the traffic to and from your service. This is exactly what a MitM attack in is.
minus-squareScoffingLizard@lemmy.dbzer0.comlinkfedilinkarrow-up2·22 days agoThis sounds like it defeats the purpose of a private DNS. At least there is VPN.
minus-squaredeadbeef79000@lemmy.nzlinkfedilinkarrow-up1·22 days agoA VPN isn’t going to protect you from CloudFlare being compromised and you’ll never even know. Likewise a private DNS will still be resolving to the CF addresses.
minus-squareScoffingLizard@lemmy.dbzer0.comlinkfedilinkarrow-up1·19 days agoWhat if we just blocked all the cdns? I think I’ve locked a few out of my domain.
The Man in the Middle (MitM).
I.e. if they’re terminating TLS and then forwarding to your TLS servers then they are capable of inspecting all the traffic to and from your service.
This is exactly what a MitM attack in is.
This sounds like it defeats the purpose of a private DNS. At least there is VPN.
A VPN isn’t going to protect you from CloudFlare being compromised and you’ll never even know.
Likewise a private DNS will still be resolving to the CF addresses.
What if we just blocked all the cdns? I think I’ve locked a few out of my domain.