> The expectation that we've drilled into users' heads is that when they see the lock icon their traffic is private.
Except it isn't. Even simple things like cloudflare's SSL termination allows the traffic to go unencrypted over the internet and be intercepted by 3rd parties.
Except it isn't. Even simple things like cloudflare's SSL termination allows the traffic to go unencrypted over the internet and be intercepted by 3rd parties.
http://www.theregister.co.uk/2016/07/14/cloudflare_investiga...