They get shit on a lot here. Why? What do they do and how is that different from other companies that offer similar services?

What I know of them: they offer DDS brute force/spam protection for websites.

  • slazer2au@lemmy.worldEnglish
    90·
    11 months ago

    I wouldn’t call it hate, just concern.

    Cloudflare acts as a front door to many sites and as such your TLS session is terminated at Cloudflare, then CF makes a additional session from themselves to the target site.
    This is concerning as that means CF can see all of your data.

      • Snot Flickerman@lemmy.blahaj.zoneEnglish
        11·
        11 months ago

        While true, and I am not a hater of Cloudflare:

        Keyless SSL is only available to Enterprise customers that maintain their own SSL certificate purchased from a valid Certificate Authority. Cloudflare does not supply any certificates for use with Keyless SSL.

        I’m not part of any Enterprise organization and I’m too poor to sign up for Enterprise level service, and so I am unable to use their Keyless SSL.

        Just for example. Sometimes it’s not that we don’t want to but can’t afford to, especially if we’re just Joe Schmoe running a handful of services on a server box.

        Once again, I have no issues with Cloudflare myself, and personally have a decent amount of respect for them.

        I’m just saying getting access to the Keyless SSL is less easy than you made it sound.

        • gencha@lemm.ee
          1·
          11 months ago

          If you’re not paying money for a service, you’re paying another way

      • ISometimesAdmin@the.coolest.zone
        33·
        11 months ago

        Right?? To let your website be susceptible to that kind of act by anyone means that you probably didn’t really care about security in the first place, so much as just getting the magic lock icon happy.

        • zeluko@kbin.social
          2·
          11 months ago

          Magic lock icon is easy, hard is it to block attacks and being able to do very little about it.
          Spoofed packets, server providers not caring what their customers do, many abuse email adresses dont even work.
          Keyless SSL would be nice and i’d use it. I have my own keys, but its for Enterprise customers only.

          I am not using Cloudflare as i dont like them handling like 80% of all traffic. But as website owner i can understand why someone would still choose them…