p0cc
Joined 8 years ago
Joined 8 years ago
SSL was the latest standard until 1999, when TLS 1.0 was released.
Per RFC 2246 [0], "The differences between this protocol [TLS 1.0] and SSL 3.0 are not dramatic, but they are significant enough to preclude interoperability between TLS 1.0 and SSL 3.0"
SSL/TLS Versions 1995-present: https://en.wikipedia.org/wiki/Transport_Layer_Security#Histo...
if cmd in ["CFIP", "DNS"]:
print("Soon")
continue
Looks like I'll have to wait :/You can contact her here: https://www.feinstein.senate.gov/public/index.cfm/contact
---
Senate Press Release on this topic: https://www.judiciary.senate.gov/press/rep/releases/graham-b...
This is a disaster waiting to happen. If it spilled, it would disrupt the Suez Canal and jeopardize the livelihoods of 1.7 million people who depend on fish.
1. No SSL: User <--HTTP--> Cloudflare <--HTTP--> Origin Server
2. Flexible SSL: User <--HTTPS--> Cloudflare <--HTTP--> Origin Server
3. Full SSL: User <--HTTPS--> Cloudflare <--HTTPS--> Origin Server; Self-signed cert ok, expired cert ok
4. Full SSL (strict): User <--HTTPS--> Cloudflare <--HTTPS--> Origin Server; Origin server must use an SSL certificate that Cloudflare provides [1]
5. Strict (SSL-Only Origin Pull): User <--HTTPS--> Cloudflare <--HTTPS--> Origin Server; same as Full SSL (strict), but you pay need to pay Cloudflare more money
---
3 and above will fix this issue as they encrypt from Cloudflare to the Origin Server.
This is the traffic flow from the link:
User -> Cloudflare -> Airtel -> GitHub Pages
Where the connection with flexible SSL is Cloudflare <--HTTP--> GitHub Pages.
Upgrading to Full SSL (or higher) and using HTTPS on GitHub [2] should fix.
---
Alternatively, deploy your static website with Cloudflare Pages [3], which has feature parity with Github Pages.
The flow would then be: User <--HTTPS--> Cloudflare Pages
[0]: https://developers.cloudflare.com/ssl/origin-configuration/s...
[1]: https://developers.cloudflare.com/ssl/origin-configuration/o...
[2]: https://docs.github.com/en/pages/getting-started-with-github...
[3]: https://pages.cloudflare.com/
EDIT: The replies by kentonv, x1110dc, and r1ch all have valid points.
Relevant XKCD: https://xkcd.com/723/
web : swit.sh email : rj[АТ]swit.sh