@clusterfcku @0xF21D @BuckRogers1965 how would they know what cached URL you requested if they didn't? They need to be able to read the request, both for providing caching and for many DOS preventions.

(to be clear I think this is a TERRIBLE tradeoff... but it's not new or anything. every CDN can do this too, which is part of why you often see CDN resources under a different domain, but not everyone does that)

@clusterfcku @0xF21D

Yes, they can just ask with a letter that says the CA can never speak about the request. Then DOGE will have the password to all your accounts.

@clusterfcku @0xF21D @BuckRogers1965 If you want to use a proxy like CF you need to upload your cert's private key to the proxy. They don't need special key - site owners send their own.

@clusterfcku @0xF21D @BuckRogers1965
Most governments have their own CA. Maybe not officially, but then via e.g. the telephone monopoly or similar.

And browsers just trust all of them.

Which is why I for years have considered the http encryption to be more secure than https. At least the "rot-zero" of http doesn't give a false sense of security