Hacker News Reader

> or if https://developers.cloudflare.com/ssl/origin-configuration/o... is used.

How is using CF’s origin CA preventing the connection to the real backend in order to bypass Cloudflare? you cam just ignore the SSL error couldn’t you?

View on HN

They probably meant to link https://developers.cloudflare.com/ssl/origin-configuration/a... where Cloudflare uses a client TLS certificate to pull from the origin and the origin should be configured to reject requests without a client certificate.

In addition, I think CF provides a list of IPs to whitelist to only allow access from their servers.

Reply on news.ycombinator.com