Comment on Risks of self-hosting a public-facing forum?

• GreenKnight23@lemmy.world ⁨1⁩ ⁨week⁩ ago

  [deleted]

  source

  • _cryptagion@lemmy.dbzer0.com ⁨1⁩ ⁨week⁩ ago

    You’re just not a pleasant person, are you? Every time you’ve replied to one of my posts, it’s to be a twatwaffle.

    An ignorant twatwaffle, considering you obviously have no idea how Cloudflare certs work. Which ends up making me look like I’m smarter than I really am, so thanks!

    source

    • GreenKnight23@lemmy.world ⁨1⁩ ⁨week⁩ ago

      [deleted]

      source

      • _cryptagion@lemmy.dbzer0.com ⁨1⁩ ⁨week⁩ ago

        Well, if you were so smart yourself, you would know the Cloudflare certs aren’t for public use. The certs your site uses to communicate with the user are shared among multiple Cloudflare users, and aren’t accessible to anyone but Cloudflare. You can’t generate, revoke, view, or download them. The decade long certs you generate are for communication between your origin server and Cloudflare, they aren’t exposed to the public internet. If you use an Argo tunnel, which many selfhosters do, they’re used for the secure VPN tunnel between yourself and Cloudflare. Since all your traffic comes from Cloudflare, a smart user would whitelist those IPs and ignore web traffic from everything else if they weren’t going to use a tunnel. Even if someone got ahold of them, which is unlikely, they wouldn’t do anyone any good, because they would need access to your Cloudflare account as well to change the origin server.

        But then, you aren’t so smart yourself. You’re just some random nobody on the internet that decided to start using their arsehole for speaking. And as is typical in such a situation, everything you say reeks of shit.

        Now, do you want to continue embarrassing yourself? Because you’re not hurting my feelings by doing so.

        source

        • -> View More Comments