Hacker News Reader

Disclaimer: Asking from a place of ignorance/naivity

What does this mean for SSL termination? E.g. SSL terminates at cloudflare, internal (behind firewall) all http-sans-s?

That depends on whether that site has Flexible or Full SSL setting enabled.

My gut says that such a thing is a bad idea and TLS for internal communications is best practice. Hard to implement though.

Hard to implement but I’m slowly dragging org teama into it.