this post was submitted on 27 May 2024
857 points (96.6% liked)

Programmer Humor

32558 readers
539 users here now

Post funny things about programming here! (Or just rant about your favourite programming language.)

Rules:

founded 5 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] SugarSnack@lemm.ee 2 points 5 months ago (2 children)

Does that mean it wouldn't be an issue if you bring an SSL cert from say ZeroSSL but use Cloudflare for DNS, caching, DDoS protection etc?

[–] SirQuackTheDuck@lemmy.world 4 points 5 months ago

For DNS and DDoS protection that wouldn't directly be an issue.

For caching it would be breaking. You cannot cache what you cannot read (encrypted traffic can only be cached by the decrypting party).

[–] markstos@lemmy.world 3 points 5 months ago

It’s not who issues the cert that matters, it is who hosts it. Hosting it includes having the private key. You always have to trust your website host, full stop.