Hacker News Reader

Comment by thesmallestcat | Hacker News Reader

People need to stop calling Cloudflare's offering HTTPS support. It's snake oil.

This is the first time I've heard such claims. Do you have any more details about this?

    +------------------+               +------------------+             +-----------------------+
    |                  |               |                  |             |                       |
    |    CLIENT        | +---------->  |    CLOUDFLARE    | +---------> |       YOU             |
    |                  |     SSL       |                  |   NOT SSL   |                       |
    +------------------+               +------------------+             +-----------------------+

OP will undoubtedly not have more info. It's not snake-oil. I used to work there. There's a real TLS connection.

How so? Shared SSL cert is still an SSL cert. Not snake oil.

Reply on news.ycombinator.com