-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Sorry, didn't sign :P Also, I contacted one of the guys from freedom.press about this and his response was that it was an acceptable risk because they were being DDoS'd. One of the guys on here, razer ray?, linked to a Yasha Levine article linking CF CEO to Project Honeypot and reckoned he was encouraged to start CF by DoD or some other Gov agency. I'm not a big fan of Yasha and don't entirely trust what he writes (just an opinion, don't sue :D ) but there were news articles in other websites about some of this stuff. So, you have to make up your own mind but i block CF IP addresses and have decided that freedom.press is an evil entity. Cheers, Oshwm. On 30 September 2015 08:13:09 BST, Oshwm <oshwm@openmailbox.org> wrote:
It is behind Cloudflare's MiTM service which adds web services names to their existing certs as alternative Names.
So your SSL/TLS connection is terminated on Cloudflare's web application firewalls and NOT the web servers that you think is terminating it.
Given CF handle over 4% of web traffic it is a great place to collect and collate what was encrypted traffic for monitoring and anti-privacy purposes.
Cheers, Oshwm.
On 30 September 2015 07:25:42 BST, Georgi Guninski <guninski@guninski.com> wrote:
On Wed, Sep 30, 2015 at 01:26:18AM -0400, grarpamp wrote:
https://freedom.press/ of which Snowden is director has weird certificate, sharing a lot of Alt names:
Alt names for ssl7272.cloudflare.com (freedom.press certificate):
DNS Name: ssl7272.cloudflare.com DNS Name: *.beauty88.com.cn DNS Name: *.beauty88.com.tw DNS Name: *.betteroff.net DNS Name: *.elderslie-babylon-fastfood.com DNS Name: *.elfourno.com DNS Name: *.errolskebabhouse.com DNS Name: *.everestbhansaghar.com DNS Name: *.everestdine.com DNS Name: *.expresskebabcrayford.com DNS Name: *.fafawispizza.com DNS Name: *.familykebab.com DNS Name: *.familykebabhouse.com DNS Name: *.fanellispizza.com DNS Name: *.fanellistakeaway.com DNS Name: *.farsleyfastfood.com DNS Name: *.fastfoodstoke.com DNS Name: *.favoritechickengrays.com DNS Name: *.favourfastfood.com DNS Name: *.freedom.press DNS Name: *.harpqualified.com DNS Name: *.haykobagdat.com DNS Name: *.helptohelp.se DNS Name: *.mcmistanbul.com DNS Name: *.ploughinn.com.au DNS Name: *.seomate.com DNS Name: *.zenithsecure.com DNS Name: beauty88.com.cn DNS Name: beauty88.com.tw DNS Name: betteroff.net DNS Name: elderslie-babylon-fastfood.com DNS Name: elfourno.com DNS Name: errolskebabhouse.com DNS Name: everestbhansaghar.com DNS Name: everestdine.com DNS Name: expresskebabcrayford.com DNS Name: fafawispizza.com DNS Name: familykebab.com DNS Name: familykebabhouse.com DNS Name: fanellispizza.com DNS Name: fanellistakeaway.com DNS Name: farsleyfastfood.com DNS Name: fastfoodstoke.com DNS Name: favoritechickengrays.com DNS Name: favourfastfood.com DNS Name: freedom.press DNS Name: harpqualified.com DNS Name: haykobagdat.com DNS Name: helptohelp.se DNS Name: mcmistanbul.com DNS Name: ploughinn.com.au DNS Name: seomate.com DNS Name: zenithsecure.com
-- Sent from my Android device with K-9 Mail. Please excuse my brevity.
- -- Sent from my Android device with K-9 Mail. Please excuse my brevity. -----BEGIN PGP SIGNATURE----- Version: APG v1.1.1 iQI7BAEBCgAlBQJWC5A+Hhxvc2h3bSA8b3Nod21Ab3Blbm1haWxib3gub3JnPgAK CRAqeAcYSpG1iFJbD/9sCSiq+8ttDyxbakSGnVFUbqrjyYrTK4VXvU9DuA+w7aNb 3jdPKeGvcmT+Cg+XFUWWB8Y0F9xUUhiuKgxM/tf+zKJzlIwZFco6KvqZXjuLUNWt DsP5IbscwdSzC5ABAtPlkUrjmefKIUpZugx+ISvqMJzCteb1vfyN56BUab7S8Yag Oo1Rz4B9Uqecc7hjvgdH0zbRYVSaXGm95LPE509eAUBm3rWbB/OYNpWZnmpHHbTP cvgHYO1V/SDUSZ5tDTKXnWQJZNxGN5WgXMh1xh+304hZ7fdg1e0HdMp4Rr/x3EaZ 0Kta4BrCqATGmcXkwHuruD9lTZzccGW/LqkHDw4NEHlgkALs4bt/t93naYUtTzxQ AB6PFJ8QiF2tqJ8tHcz0wzP3acdSvZMiyPwKWoDApaszzswhM6OA/bKM/PB3TDAu 6I/kTv00617j1vKFj6klpLlOLebUvK9uxSkAM4qnpb6+IkXhr6XTyOYpvXXvpCQs nRukVe4JNDhKOq0kfpQpl3KBLTxyJYxQj61yQJqh7M0Zyqku4XqAIdCcxvXIALVa 9f2zUEzb8DjPWJk3/6r2a2ZPEDgc15VZlhDfaGTHjPhhXiBjO0SXPdPvGdoLKsaA aQE7Nh1VMzks9iui7PYlA3MuUg8Lvq+KiIgMIUfToOwTFTq82AZhqYt/HlJ1YA== =bBET -----END PGP SIGNATURE-----