131–140 of 318 posts
Earlier quoted context omitted.
One of them is not like the other, and that's CloudFlare's free SSL, which is more like "half-SSL". You only get free encryption between Cloudflare and the user, but not between your site and Cloudflare.
I don't think that's true anymore, see https://www.cloudflare.com/ssl ("Full SSL" and "Full SSL (strict)" options)
> So thus beings the transition. EV certs are going to be the only ones that get the "green" chrome in browsers anymore. Sites using standard SSL are going to get the normal no-lock/white treatment. And sites without SSL will get the caution symbol/yellow treatment.
I don't like it, but I suspect this is where we're heading.
[1] https://www.reddit.com/r/linux/comments/3pg37u/lets_encrypt_...
Earlier quoted context omitted.
One of them is not like the other, and that's CloudFlare's free SSL, which is more like "half-SSL". You only get free encryption between Cloudflare and the user, but not between your site and Cloudflare.
I don't think that's true anymore, see https://www.cloudflare.com/ssl ("Full SSL" and "Full SSL (strict)" options)
Why python for the client software if you obviously already have Go experience in-house? Using python means you have to run all this virtual-env crap in a bash script, apt-get install a bunch of crap for setup and not support Windows. Seems like using a (nearly) dependency-free Go application for the client as well would have been a no brainer. Was it just a case of having more access to python devs, or were there ot…
Earlier quoted context omitted.
StartSSL is the opposite of user friendly.
Here's a cert! Hopefully you still have it around somewhere when you try to renew in a year!
One year passed, and I checked my backups. Yup, there it was.
If you take security seriously, you should actually read what's on the page instead of clicking "next, next, next" like some driveby malware-installing Windows-installer. And then this shouldn't be an issue.
I guess this is StartSSL's way of not having to deal with people who don't take security as seriously as they do.
Earlier quoted context omitted.
I don't think that's true anymore, see https://www.cloudflare.com/ssl ("Full SSL" and "Full SSL (strict)" options)
Ah, but to use the Full SSL options you need an SSL on your origin server (which CloudFlare doesn't provide for free)!
Earlier quoted context omitted.
Here's a cert! Hopefully you still have it around somewhere when you try to renew in a year!
They specifically tell you that you need to back up your login-cert or you will lose access . One year passed, and I checked my backups. Yup, there it was. If you take security seriously, you should actually read what's on the page instead of clicking "next, next, next" like some driveby malware-installing Windows-installer. And then this shouldn't be an issue. I guess this is StartSSL's way of not having to deal wit…
StartSSL doesn't take security serious. They'll happily accept breaches to their terms of use, as long as you pay up.