alt Hacker NewsI believe with tailscale you don’t have to trust a 3rd party with your cleartext traffic
Replies
spwa4 • today at 5:48 PM
That can't be right. If they're hosting on a different DNS they have an absolute need to MITM ssl/tls traffic. Can't work otherwise.
So cloudflare sees your plaintext. Btw: tailscale does not (but ssl errors and warnings are unavoidable)
But you do seem to get to host a https version of your app in case you need features locked behind secure context.