Comments

This profile is from a federated server and may be incomplete. Browse more on the original instance.

Dave, to selfhosted in What's wrong with using cloudflared?
@Dave@lemmy.nz avatar

I think concerns come in two flavours:

  1. Privacy/security: Cloudflare terminates HTTPS, which means they decrypt your data on their side (e.g. browser to cloudflare section) then re-encrypt for the second part (cloudflare to server). They can therefore read your traffic, including passwords. Depending on your threat model, this might be a concern or it might not. A counterpoint is that Cloudflare helps protect your service from bad actors, so it could be seen to increase security.
  2. Cloudflare is centralised. The sidebar of this community states “A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.”, and Cloudflare is for sure a service you don’t control, and arguably you’re locked into it if you can’t access your stuff without it. Some people think Coudflare goes against the ethos of self-hosting.

With that said, you’ll find several large lemmy instances (and many small ones) use cloudflare. While you’ll easily find people against its use, you’ll find many more people in the self-hosted community using it because it’s (typically) free and it works. If you want to use it, and you’re ok with the above, then go ahead.

Dave, to memes in Everything I need is still in in the old settings windows that haven't changed in 23 years
@Dave@lemmy.nz avatar

I thought this was intentional? They have control panel stuff somewhat similar to the old style, but build a settings app for the less technical people so they can find common stuff without getting overwhelmed?

Dave, to asklemmy in What are some good questions to ask your boss during your yearly review?
@Dave@lemmy.nz avatar

If you’re on the path to level 2, ask what you need to get there.

If you can get specific feedback then you can work on those things, and it also shows your boss that it’s your goal so they can help you work towards it.

Dave, to memes in Let's hope it never has to come to this
@Dave@lemmy.nz avatar

Is the toilet pipe actually full of oxygen? I guess there’s a vent to let it in?

Dave, to linuxmemes in Two moods
@Dave@lemmy.nz avatar

Now you mention it, I have spend so many hours on Windows trying to get the damn game to work. Trying to hide run Windows games on Linux, if it doesn’t work immedietly and I can’t find easy tweaks to fix it then I just assume it doesn’t work on Linux. But when a Windows game doesn’t work on Windows, I will spent hours making it work because I know it should!

Dave, to piracy in Visits to piracy websites have increased 12% in the past four years
@Dave@lemmy.nz avatar

For the record, you can use justwatch.com and it will tell you exactly where you can watch it, and which seasons. But I’m still not paying for multiple subscriptions.

Dave, to memes in If pants wore pants...
@Dave@lemmy.nz avatar

I mean, the humans think it’s cool to take perfectly good pants, tear holes in them until there are hardly any pants, and wear them like that. Maybe pants are even cooler?

Dave, to announcements in Lemmy v0.19.2 Release - More federation fixes
@Dave@lemmy.nz avatar

Today I can say I can see the comment on my instance. Quite possibly it took some time for federation to catch up after being broken for a while.

Dave, to memes in It's a mystery
@Dave@lemmy.nz avatar

Haha oh boy, I had no idea, and it took almost a day before anyone mentioned it. Now I know.

Dave, to memes in It's a mystery
@Dave@lemmy.nz avatar

… the orphan-crushing one?

Dave, to selfhosted in Suddenly getting a server error on my instance
@Dave@lemmy.nz avatar

If the error is with the UI, then trying a mobile app is a good place to start (since they should connect to the API directly).

Dave, to selfhosted in How often do you back up?
@Dave@lemmy.nz avatar

Sealed, airtight, and waterproof but what if both banks burn down at the same time? You didn’t mention fire-proof.

Dave, to selfhosted in What's wrong with using cloudflared?
@Dave@lemmy.nz avatar

I’m not quite sure I get what you’re getting at. If you’re using Cloudflare (for more than just a nameserver), then the client’s browser is connecting to Cloudflare via a Cloudflare SSL certificate. Any password (or other data) submitted will be readable by Cloudflare because the encryption is only between the browser and Cloudflare. They then connect to your reverse proxy, which might have SSL or it might be unencrypted. That’s a second jump done by re-encrypting the data.

How does the reverse proxy help, when the browser is connecting to Cloudflare not to the reverse proxy?

Dave, to selfhosted in What's wrong with using cloudflared?
@Dave@lemmy.nz avatar

They also say “Cloudflare DDoS protection secures websites and applications while ensuring the performance of legitimate traffic is not compromised.”, with a tick to indicate this is included in the Free tier.

You are honestly the first person I’ve heard complain about Cloudflare failing to protect against DDoS attacks. However, I have no doubt that not having Cloudflare, I would fare no better. So still seems worthwhile to me.

Dave, to selfhosted in What's wrong with using cloudflared?
@Dave@lemmy.nz avatar

They explicitly use free DDoS protection as a way to get you in the door, and upsell you on other things. Have you seen them “drop your tunnel like a hot potato”?

Now obviously if their network is at capacity they would prioritise paying customers, but I’ve never heard of there being an issue with DDoS protection for free users. But I have heard stories of sites enabling Cloudflare while being DDoSed and it resolving the problem.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #