• activated [he/him]
    ·
    3 years ago

    They can't trivially decrypt and log the traffic if any cipher suite with forward secrecy is used. ECDHE is a good example.

    • LeninWeave [none/use name]
      ·
      3 years ago

      They can and do trivially decrypt the traffic. The CF certificate is used only between the client and CF's servers, which decrypt the data.