5 ms·
If you're okay with not having "authenticated pulls" (i.e., the request from the CF edge to your server being unencrypted), Cloudflare gives you SSL for free.
by brobinson 11y ago
If you're okay with not having "authenticated pulls" (i.e., the request from the CF edge to your server being unencrypted), Cloudflare gives you SSL for free. Their SSL config gets an A+ on SSLLabs tester, too.
Far from a solution to the SSL problem, but an interesting and free option for a lot of sites that otherwise would not bother with SSL.
- 0x0 11y agoBut then you end up visibly sharing a certificate with "nigerian-prince.com" - http://www.slate.com/blogs/future_tense/2015/03/23/ted_cruz_presidential_campaign_weird_tech_moments.html http://www.slate.com/blogs/future_tense/2015/03/23/ted_cruz_...
- brobinson 11y agoThis is great. I guess that is indeed a con of the CF approach!
- MichaelGG 11y agoI wonder why Cloudflare doesn't sign certs for their users to be used just for CF connecting to them. Seems like an obvious step to take.
- brobinson 11y agoThat would go against their "setup only takes five minutes!" mantra. It's an interesting idea, though.
- jlgaddis 11y agoThey do. It's a part of their "Universal SSL" [0] called "Strict Mode". [0]: https://blog.cloudflare.com/universal-ssl-encryption-all-the-way-to-the-origin-for-free/ https://blog.cloudflare.com/universal-ssl-encryption-all-the...