Skip Navigation
Jump
How are so many sites OK with using cloudflare when they are basically a MITM?
  • Because that's not how certificates work?

    Your private key is never sent to the CA with you submit a Certificate Signing Request, only the public key and a bunch of metadata.

    (The exception being code signing certs that are delivered on an HSM but the key never leaves the HSM)

    1