k3can blog

Just a small update here.

Following up from my last post, where I talked a bit about proxy TLS termination and third-party interception, I think it raised an obvious question: if TLS (as it is typically used today) can’t be 100% relied on to verify origin, what can?

I mentioned in a previous post that using Cloudflare’s reverse proxy services (such as “tunnels” or “proxied domains”) comes with certain security and privacy implications.

I will be relocating my servers again in the next few months.

For a while now, I’ve followed a pretty strict rule: public services are public, and private services are private.