[adamgamble]

Why wouldn’t they fund the worlds largest MITM attack?

[charcircuit]

Cloudflare is not a MitM attack. By that same logic AWS would be an even bigger MitM attack.

[adamgamble]

What am I missing? They literally decrypt all the traffic to your website, do some stuff, then re-encrypt and send it on to your server.

[udev4096]

That's a lie. Cloudflare decrypts HTTPS connections

[hamandcheese]

By that same logic, it would not be surprising to discover AWS working with the feds either.

[Lammy]

> By that same logic AWS would be an even bigger MitM attack.

Amazon HQ2, Arlington Virginia: https://en.wikipedia.org/wiki/Amazon_HQ2

[pieter_mj]

It's worse. You can't just start Mitm'ing regular encrypted internet traffic without compromised infrastructure. With Cloudflare everything is already in place.

[yencabulator]

You can avoid that with some programming/setup and money: https://developers.cloudflare.com/ssl/keyless-ssl/