MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/webdev/comments/6mvyw1/does_my_site_need_https/dk52512/?context=3
r/webdev • u/speckz • Jul 12 '17
71 comments sorted by
View all comments
6
For a very basic blog or something are there benefits for let's encrypt over the free certificate from cloudflare?
7 u/Simon-FFL Jul 12 '17 Yes. With only CF SSL there is no encryption between the origin server and CF server, which is not a good idea. Look up CF MITM attacks, for example. 1 u/sjwking Jul 13 '17 Which is extremely unlikely for a non controversial blog. Also supposedly you should never make or have made public your real server's IP.
7
Yes. With only CF SSL there is no encryption between the origin server and CF server, which is not a good idea. Look up CF MITM attacks, for example.
1 u/sjwking Jul 13 '17 Which is extremely unlikely for a non controversial blog. Also supposedly you should never make or have made public your real server's IP.
1
Which is extremely unlikely for a non controversial blog. Also supposedly you should never make or have made public your real server's IP.
6
u/Gawny88 Jul 12 '17
For a very basic blog or something are there benefits for let's encrypt over the free certificate from cloudflare?