Skip to Content [alt-c]

Comment

In reply to Comment by Reader John

Andrew Ayer on 2014-11-20 at 15:21:

"Full SSL" is better than "Flexible SSL" but it's not authenticated, meaning the connection between CloudFlare and the origin can be man-in-the-middled by active attackers.

"Full SSL (Strict)" is the only secure mode.

Reply

Post a Reply

Your comment will be public. If you would like to contact me privately, please email me. Please keep your comment on-topic, polite, and comprehensible.

(Optional; will be published)

(Optional; will not be published)

(Optional; will be published)

  • Blank lines separate paragraphs.
  • Lines starting with ">" are indented as block quotes.
  • Lines starting with two spaces are reproduced verbatim.
  • Text surrounded by *asterisks* is italicized.
  • Text surrounded by `back ticks` is monospaced.
  • URLs are turned into links.
  • Use the Preview button to check your formatting.