lntl@lemmy.ml to Privacy@lemmy.mlEnglish · hace 20 díasI imagine that instead of beating TLS, state actors work with Cloudflare and the other CDNs who terminate the connection to listen in.message-squaremessage-square19linkfedilinkarrow-up164arrow-down11file-text
arrow-up163arrow-down1message-squareI imagine that instead of beating TLS, state actors work with Cloudflare and the other CDNs who terminate the connection to listen in.lntl@lemmy.ml to Privacy@lemmy.mlEnglish · hace 20 díasmessage-square19linkfedilinkfile-text
minus-squareScoffingLizard@lemmy.dbzer0.comlinkfedilinkarrow-up1·hace 10 díasWhat exactly are the CDNs?
minus-squaredeadbeef79000@lemmy.nzlinkfedilinkarrow-up1·hace 10 díasThe Man in the Middle (MitM). I.e. if they’re terminating TLS and then forwarding to your TLS servers then they are capable of inspecting all the traffic to and from your service. This is exactly what a MitM attack in is.
minus-squareScoffingLizard@lemmy.dbzer0.comlinkfedilinkarrow-up1·hace 6 díasWhat if we just blocked all the cdns? I think I’ve locked a few out of my domain.
minus-squareScoffingLizard@lemmy.dbzer0.comlinkfedilinkarrow-up2·hace 9 díasThis sounds like it defeats the purpose of a private DNS. At least there is VPN.
minus-squaredeadbeef79000@lemmy.nzlinkfedilinkarrow-up1·hace 9 díasA VPN isn’t going to protect you from CloudFlare being compromised and you’ll never even know. Likewise a private DNS will still be resolving to the CF addresses.
What exactly are the CDNs?
The Man in the Middle (MitM).
I.e. if they’re terminating TLS and then forwarding to your TLS servers then they are capable of inspecting all the traffic to and from your service.
This is exactly what a MitM attack in is.
What if we just blocked all the cdns? I think I’ve locked a few out of my domain.
This sounds like it defeats the purpose of a private DNS. At least there is VPN.
A VPN isn’t going to protect you from CloudFlare being compromised and you’ll never even know.
Likewise a private DNS will still be resolving to the CF addresses.