phoronix.com using CloudflareSSL ?

[ossuser]

Recently I noticed the Phoronix website became less responsive for me.
I checked some settings and saw that Phoronix.com is using using CloudflareSSL (check certificate altnames).

Where "standard" SSL requires a server certificate and delivers a point-to-point secure connection, this is not the case with CLoudflareSSL.

As I understand it, Cloudflare (or 3rd parties they might share their keys with) can see which links you click within Phoronix.com.
Even the posts that Phoronix users make, can be read in cleartext.

Basically breaking the whole idea behind encryption, while client browsers think they are "safe", and present the green shield.

What was your consideration for using CloudflareSSL, Michael ?

If I didn't understand the concept behind ClaoudflareSSL, please enlighten me.

[Michael]

Generally speaking CloudFlare works quite well for caching / delivering content faster.

[ossuser]

I can imagine that, because they seem to cache and compress the unencrypted stuff.

But why use SSL then, when there's no effective encryption ?

You could as well present a http site instead of https then, isn't it ?

[mikahawkins]

Hello,
Cloudflare is a free CDN type product that protects against threats such as SQL injection and identity theft. Cloudflare also improves site performance and speeds up loading times by using their multiple data centers that are located around the world. The Cloudflare network acts like a giant VPN.
Regards,
Mika Hawkins

[Ironmask]

Hello,
Cloudflare is a free CDN type product that protects against threats such as SQL injection and identity theft. Cloudflare also improves site performance and speeds up loading times by using their multiple data centers that are located around the world. The Cloudflare network acts like a giant VPN.
Regards,
Mika Hawkins

Personally I think if you have a developer on staff stupid enough to allow SQL injections then you deserve to be exploited.

And I don't get the identity theft thing, I don't see why Cloudflare is so important for that. Sounds a lot like meaningless VPN fluff propaganda. I already hate VPNs and consider them to be an outright scam, calling Cloudflare one (it's not) doesn't help.