Cloudflare gets our edge SSL certificates from Google Trust Services. Risks for PBNs?

max.skinner

Newbie
Joined
Oct 2, 2021
Messages
4
Reaction score
2
Just noticed this. When you add your domain to Cloudflare, they will issue an edge SSL cert right away. They use Google Trust Services and it's safe to assume that if there's any info Google can use for their search ranking tasks, detecting PBNs in particular, they probably will.

What Cloudflare does specifically is create a TXT record at
Code:
_acme-challenge.example.com
for cert validation purposes. That one is probably some gibberish that doesn't contain the IP, but it made me think still (in a more curious than paranoid way): can the original server IP be somehow leaked through the SSL certificate? I don't have understanding exactly how are SSL handshakes performed, so this is why I'm asking.
 
Back
Top