wrote: "[...] something we technically knew was going on before but didn't consciously consider a threat, until now."

I've been warning for CDN's like Cloudflare and Fastly (and cloud providers in general) for a long time.

Here's a recent toot (in Dutch, the "translate" button should do the job): infosec.exchange/@ErikvanStrat….

If you trust Google to translate it (guaranteed NOT error-free, it *may* work in other browsers than Chrome): infosec-exchange.translate.goo…

P.S. Fastly knows your infosec.exchange login credentials.

@malanalysis

#Cloudflare #MitM #AitM #Fastly #CDN #TLSinterception

Erik van Straten (@ErikvanStraten@infosec.exchange)

Attached: 1 image Risico Cloudflare (+Trump) 🌦️ Achter Cloudflare Steeds meer websites zitten "achter" het Amerikaanse bedrijf Cloudflare. Stel u opent https://pvv.

^{Infosec Exchange}

The #curl website has been hosted by #Fastly CDN for over seven years now. I cannot ask for a better service and a friendlier company to help us.

Starting now they offer a free tier. fastly.com/pricing/

Here's my blog post from seven years ago: daniel.haxx.se/blog/2017/05/02…

Edge cloud pricing

Test up to $50 of traffic for free, no commitment required.

^{www.fastly.com}

From the #Fastly dashboard showing the "Percentage of cache hits to all cacheable content over time" for the last 30 days for the #curl website:

A sustained 99.95% cache hit rate.