Hacker News new | ask | show | jobs
by gnurag 3621 days ago
The lesson learnt from this fiasco is that CF can't trust its upstream ISPs, so tunneling traffic over to another ISP in a different geo adds additional overhead without actually solving the problem.

The right approach to fix upstream MITM is to drop http+https mix and match mode.