小绿锁 | /cn/2017/01/cloudflare/

yihui 2022-12-17 00:41:01

小绿锁 | 谢益辉

https://yihui.org/cn/2017/01/cloudflare/

2 Comments

giscus-bot 2022-12-17 00:41:02

访客 *yixuanq* @ 2017-01-17 20:06:49 写道：

COS是不是也能这么搞一下？之前Google还发过邮件，说不安全什么的。

@yixuan

yihui 2022-12-17 00:41:04

我正是因为这个原因才看该怎么弄 https 的。COS 的域名可以这么弄，等改版完了再弄吧。现在有流言说攻心部将要禁止国内的服务器对国外注册的域名服务，有点恶心，搞不好我们还得用国外的服务器。

——原帖发布于 2017-01-18 05:03:40

giscus-bot 2022-12-17 00:41:03

Guest *Cheng-Jun Wang* @ 2017-01-19 13:36:42 originally posted:

"If you're okay with traffic flowing in clear text between CloudFlare and GitHub, you can turn on SSL for free in front of your GitHub Pages site with a custom domain. But be careful. This is a tempting, but incomplete solution. I was very disappointed to see the MayDay SuperPAC use this configuration to solicit donations. An attacker who could get between CloudFlare and GitHub could have altered the form in transit to send payment information to anywhere they wanted."

From https://konklone.com/post/github-pages-now-supports-https-so-use-it#using-your-custom-domain

yihui 2022-12-17 00:41:05

谢谢提醒。我应该不会真的在我的个人网站上让任何人输入私人信息的。

——原帖发布于 2017-01-19 19:36:49