Hacker News new | ask | show | jobs
by mlindner 2104 days ago
If your root CA is subject to the laws of a government that can take the root certificates and MITM the connection with those root CAs that's not much better. Cloudflare just makes it easier.
2 comments

Certificate Transparency makes this significantly harder to do stealthily. I’m not convinced that Cloudflare is a deep state operation either, but Cloudflare's ability to secretly MITM is a position afforded to a select few, and certainly not every CA.
It's much easier (and virtually undetectable) to MITM when you are also the reverse proxy though.