How secure is that technology? Can someone tamper with your traffic between a server and Cloudflare in the first place?
And if the answer is yes, how can you check if a website is using the Flexible SSL?
Obviously, it is not the most secure way to serve the server's data, but websites which don't want to pay for a certificate, they use that free feature.
Flexible SSL: There is an encrypted connection between your website visitors and CloudFlare, but not from CloudFlare to your server.
- You do not need an SSL certificate on your server
- Visitors will see the SSL lock icon in their browser
So 2 questions, the 2nd question is a summary of the first.
How secure is the Flexible SSL technology?
For example, can someone attack you with a Man-in-the-middle attack?
your server -> attacker -> cloudflare
If the answer to the first question is "It is not secure and there are a couple attacks that can be done like MITM attack", the second question is:
How can the attacker find out that there is a Flexible SSL connection?