1 Topic by sagaracharya

  • sagaracharya
  • Guest

Topic: Suggest some privacy and freedom respecting CDNs

I have come across multiple suggestions of CDNs like cloudfare. However, if someone has explored this area,

please recommend me some privacy and freedom respecting CDNs, preferably free.

I have to convert ipv4 requests to ipv6 and use them as a proxy server. Will the encryption is https be from end to end (client to my server) or do I need to trust CDNs?

2 Reply by sagaracharya (edited by sagaracharya 2021-09-02 04:50:03)

  • sagaracharya
  • Guest

Re: Suggest some privacy and freedom respecting CDNs

Solution:

One doesn't need to trust proxy server. In TLS, only the Certifying authority (CA like Lets Encrypt) in trusted.

https://ungleich.ch/u/products/ipv4-to-ipv6-proxy/

Edit: Proxy servers mustn't be trusted. I run my site with end to end encryption by Let's encrypt with DNS at Cloudflare. They do have all the unencrypted information sent by the client though.

3 Reply by sagaracharya

  • sagaracharya
  • Guest

Re: Suggest some privacy and freedom respecting CDNs

Cloudflare shows a different certificate to the one I have on my server. I have enabled end to end encryption and it should show my cert!

Wow! It sees all the data pretending it doesn't!

[img]blob:https://upload.disroot.org/5c52166d-b14a-4de4-bde3-124e3e1153a9[/img]

4 Reply by zapper

  • zapper
  • zapper
  • Hyper Cyber
  • Offline
  • Registered: 2017-10-18
  • Posts: 1,054

Re: Suggest some privacy and freedom respecting CDNs

Avoid cloudflare its the bane of certificates...

HyperbolaBSD: The Future of Secure Libre Lightweight Operating Systems!

5 Reply by sagaracharya

  • sagaracharya
  • Guest

Re: Suggest some privacy and freedom respecting CDNs

Are there any alternatives? It's horrible since they have generated another cert in my site's domain name!

I can't because otherwise, there would be no DesignMan for ipv4 based network clients. I have mailed some folks to provide this service. No reply yet.

I myself could probably host such a thing if I have ipv4 to ipv6 and ipv6 to ipv4 conversion code (hopefully written in C) and a server with static ipv4 and ipv6 address.

6 Reply by zapper

  • zapper
  • zapper
  • Hyper Cyber
  • Offline
  • Registered: 2017-10-18
  • Posts: 1,054

Re: Suggest some privacy and freedom respecting CDNs

sagaracharya wrote:

Are there any alternatives? It's horrible since they have generated another cert in my site's domain name!

I can't because otherwise, there would be no DesignMan for ipv4 based network clients. I have mailed some folks to provide this service. No reply yet.

I myself could probably host such a thing if I have ipv4 to ipv6 and ipv6 to ipv4 conversion code (hopefully written in C) and a server with static ipv4 and ipv6 address.

I am no expert on this, unfortunately, but cloudflare is the absolute worse. Some people even refer to cloudflare as buttflare because it is so terrible.

I have seen examples of this on some git page somewhere.

either notabug.org or codeberg.org probably. 

But yeah, you should ask someone who has more knowledge then I, in case they know. Essentially, I am just bumping this thread in case someone knows.  Wish I could tell you more though.

HyperbolaBSD: The Future of Secure Libre Lightweight Operating Systems!