Pages:
Author

Topic: Cloudflare - page 3. (Read 14889 times)

hero member
Activity: 838
Merit: 534
December 01, 2013, 11:45:53 AM
#13
I'm not sure if its because cloudflare

But a lot of people from europe cant connect to the website.


Greetings
legendary
Activity: 966
Merit: 1004
Keep it real
December 01, 2013, 09:58:40 AM
#12
I'm really baffled that 2 staff members find out about this after it happened.
Shouldn't this be discussed beforehand, and if not announced publicly (which it should), at least announced to staff members?

Probably should be.... but it's not.
newbie
Activity: 56
Merit: 0
December 01, 2013, 09:15:11 AM
#11
I'm now having issues connecting to bitcointalk.org

It doesn't load through my internet at home, I've got to get here through my phone. 

Also, for some reason, safari & chrome crash when attempting to access this thread through my iphone.

I had the same issues with btc-e.com for a whiled.  cloudflare was confusing my ISP and sending me in a redirect loop.  It only just got sorted.

*sigh*
sr. member
Activity: 336
Merit: 250
Cuddling, censored, unicorn-shaped troll.
December 01, 2013, 08:56:20 AM
#10
I'm really baffled that 2 staff members find out about this after it happened.
Shouldn't this be discussed beforehand, and if not announced publicly (which it should), at least announced to staff members?
legendary
Activity: 1176
Merit: 1001
December 01, 2013, 08:44:43 AM
#9
I remember theymos writing that the third party can't read the content, and the SSL connection to the server is still protected.
That would be good— any citation? (I did look briefly)
I did look as well and came out with the conclusion that i misinterpret his post, as i always misinterpret every post i read...

Geotrust doesn't have access to the private key. They're a CA. They sign public keys. Any widely-trusted CA can replace a certificate signed by any other CA, so using a more expensive CA is pointless. But unlike Cloudflare, a CA can't retroactively decrypt encrypted traffic, and it's possible for users to notice a certificate change if they pay close attention.

staff
Activity: 4284
Merit: 8808
December 01, 2013, 07:47:00 AM
#8
I remember theymos writing that the third party can't read the content, and the SSL connection to the server is still protected.
That would be good— any citation? (I did look briefly)
legendary
Activity: 1176
Merit: 1001
December 01, 2013, 07:44:03 AM
#7
I don't get it, i've never used CF before for this very reason.
CF has a copy of the certificate of the forum right now? Also, it looks like that i'm still connecting to 109.201.133.195, that doesn't go trough CF.
legendary
Activity: 1372
Merit: 1008
1davout
December 01, 2013, 07:35:47 AM
#6
The "Pro" plan seems like to allow the use of your certificate, CF should only act as a proxy.

Both options are a massive MITM vulnerability.
legendary
Activity: 1176
Merit: 1001
December 01, 2013, 07:32:19 AM
#5
The "Pro" plan seems like to allow the use of your certificate, CF should only act as a proxy.
legendary
Activity: 1372
Merit: 1008
1davout
December 01, 2013, 07:24:24 AM
#4
I remember theymos writing that the third party can't read the content, and the SSL connection to the server is still protected.

This is factually incorrect.
Using cloudflare for anything bitcoin-related is a fucking heresy.
As a matter of fact there is exactly one venue that could use it safely and it's MPEx.
legendary
Activity: 1176
Merit: 1001
December 01, 2013, 07:22:35 AM
#3
I remember theymos writing that the third party can't read the content, and the SSL connection to the server is still protected.
legendary
Activity: 1372
Merit: 1008
1davout
December 01, 2013, 07:17:55 AM
#2
I noticed that bitcointalk is now being served via cloudflare. I'd missed this happening. What a bummer this is.

Whats the point of having the forum behind SSL when the keys are handed over to a third party?

Don't worry it's safe, they just reinvented SSSS.
staff
Activity: 4284
Merit: 8808
December 01, 2013, 07:16:27 AM
#1
I noticed that bitcointalk is now being served via cloudflare. I'd missed this happening. What a bummer this is.

Whats the point of having the forum behind SSL when the keys are handed over to a third party?
Pages:
Jump to: