Sad to see. We should all know cloudlfare decrypts our data before it reaches the service it protects. A perfect surveillance man-in-the-middle.

I was happy to find a home in the fediverse that uses Anubis instead.

https://anubis.techaro.lol/

    • TerdFerguson ( TerdFerguson@lemmy.ca ) OP
      link
      fedilink
      arrow-up
      11
      ·
      5 months ago

      Correct. That is an accurate description of my post.

      Cloudflare was the reason why I changed instances, I specifically sought one that used Anubis instead. There is no other reason why I changed instances, this is the lemmy privacy community.

  • AcidBurn ( AcidBurn@lemmy.dbzer0.com ) deleted by creator
    link
    fedilink
    arrow-up
    2
    ·
    edit-2
    5 months ago

    Was thinking about it incorrectly when I wrote this comment.

    If they use SSL/TLS between their host server and Cloudflare, then Cloudflare can’t decrypt your traffic as you’re suggesting.

    • TerdFerguson ( TerdFerguson@lemmy.ca ) OP
      link
      fedilink
      arrow-up
      4
      ·
      5 months ago

      Cloudflare is the SSL/TLS endpoint between you and the application.

      When you use Cloudflare, data is encrypted between a client and Cloudflare (using ‘their’ SSL cert), they unencrypt it and inspect so they can process it, caching etc, then it’ can be encrypted between Cloudflare and the backend using your own backend certificate.

      So Cloudflare can see everything, its required for them to do what they do