They're still decrypting on their nodes, and then re-encrypting before sending to the origin. There's no getting around the fact they can see the traffic as plain text.
Full Strict just means that CF verifies your origin cert against actual CAs (or the private CA they issue you a cert for). "Full" means they don't verify the certificate authority of your origin, which technically is _a lot worse_ because that means you could be getting silently MITMd by some middlebox, since Cloudflare will accept whatever self-signed certificate your origin presents.
For almost all of Cloudflare's features. CDN, WAF, and all the compute features require seeing, storing, and caching content in plaintext. CF doesn't have much of a value proposition if all they're doing is handling Layer 3/4 DDOS prevention (most DDOS hits even back in 2015 were done on the protocol layer, or at least most DDOSes that actually showed up or impacted the underlying service).
You can basically self-host your repos on a cheap VPS. I did that some time ago. You'll have to create a ssh user that has only 'git' as a shell, iirc, on that box. Works okay. But doesn't provide a web ui.
I would not be so quick to judge.
Book are better consumed actively than passively. To me it hints on a desire to absorb what's being read. i.e. a thirst for knowledge that is weighed above material possession.
It made it trivial for me to deploy reproducible blocks that are also nicely integrated and automated on certain axes (DNS, LetsEncrypt, load balancer / reverse proxy, storage management, PostgreSQL databases with backups).
All of that with considerably easier to understand and debug mechanisms in my experience than doing it with old school configuration management or, even worse, manually.
Using the same software you might use at work and getting better at it, perhaps even exploring simpler distros like K3s, k0s, Minikube or whatever people use nowadays.
And for some non-geoblocked music, if you want to actually purchase the song as MP3, there's no way unless you have a Mac or Windows PC to install iTunes (too bad for Linux users).
https://uk.7digital.com/ has a lot of songs available in MP3 format, but not as many as on iTunes.
It sounds like history, storage and ethereal at the same time.
reply