this post was submitted on 20 Nov 2023
2 points (100.0% liked)

Self-Hosted Main

502 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
communick@selfhosted.forum
2
How are so many sites OK with using cloudflare when they are basically a MITM? (alien.top)
submitted 10 months ago by spottyPotty@alien.top to c/main@selfhosted.forum
87 comments fedilink hide all child comments
 

Regardless of whether or not you provide your own SSL certificates, cloudflare still uses their own between their servers and client browsers. So any SSL encrypted traffic is unencrypted at their end before being re-encrypted with your certificate. How can such an entity be trusted?

you are viewing a single comment's thread
view the rest of the comments
[–] ms_83@alien.top 1 points 10 months ago (8 children)

Because it’s not always about the encryption. I use Cloudflare tunnels because they are a good way of exposing sites to the internet without exposing my IP or opening ports, which means I don’t have to worry as much about DDoS or other attacks and therefore I don’t need to spend as much effort defending against them.

Even Cloudflare decides to inspect my traffic (and seriously why would they care about a tiny hobbyist website) it’s not like it gives them full access to everything, there are other controls you can use depending what your site is for.

Honestly what I don’t understand is why some on this sub have such strong objections to Cloudflare. Like I get they are a terrible company in a lot of ways, but name a tech company that isn’t?

[–] thekrautboy@alien.top 2 points 10 months ago (1 children)

Even Cloudflare decides to inspect my traffic (and seriously why would they care about a tiny hobbyist website)

The good old "eh what do i care i dont have anything to hide" approach to security and privacy. Excellent!

"If you have nothing to hide then you dont have to worry!"

I wont respond further in this thread because i already know how these discussions go.

Like I get they are a terrible company in a lot of ways, but name a tech company that isn’t?

Why would anyone argue that other companies are saints? Are you aware you are in /r/selfhosting here? The whole point is to regain control of your own data, be in charge of who stores what, where and how.

[–] ms_83@alien.top 1 points 10 months ago (1 children)

But if you don’t trust Cloudflare, who do you trust, and why? Do you trust your ISP? Do you trust Intel or AMD? The people who manufacture your router or other networking kit? People’s trust boundaries exist at different levels. If you are happy with your own, fine, but you don’t get to tell other people that they are doing it wrong just because their boundaries are different.

[–] thekrautboy@alien.top 2 points 10 months ago

As i already replied to you in another comment... that is the definition of selfhosting of this subreddit, which you are now participating in.

And no, i dont trust anyone. I dont trust my ISP. I dont trust Intel or AMD. I dont even own a computer. And my house is powered by a diesel generator only 2 hours per day, while its covered completely in aluminium foil. I am writing these reddit comments on post-it notes and every few minutes i send one of my kids on their bicycle to drive to a random neighbour and they post them for me.

But youre not getting any more post-its from me, dont worry.

load more comments (6 replies)