Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Universal SSL

blog.cloudflare.com

Post reply on HN
Print view View original

1–10 of 250 posts

Re: Universal SSL

#2

Post by spacefight »

Great initiative, minor drawbacks such as up to 20% of the traffic wouldn't apply due to their use of SNI:

"Globally, more than 80% of requests come from modern browsers, and that percentage is growing quickly."

EDIT: Mixed content on that page (within the embedded map at https://cloudflare.github.io/sni-visualization/)

Re: Universal SSL

#4

Post by zaroth »

This is great, but just two concerns. CloudFlare just generated itself certs for how many domains? And you don't really have a secure connection but the browser will report that you do.

Re: Universal SSL

#5

Post by eastdakota »

LordIllidan wrote: post #3

This is excellent news - one question though - what would a user on XP see when he accesses one of these sites?

If Windows XP and Internet Explorer then they'll get a SSL error if visiting via HTTPS. Won't have a problem over HTTP.

Re: Universal SSL

#7

Post by josephwegner »

zaroth wrote: post #4

This is great, but just two concerns. CloudFlare just generated itself certs for how many domains? And you don't really have a secure connection but the browser will report that you do.

They do actually give you the ability to make this totally secure. They mentioned in the post that they will provide instructions on how to install a CloudFlare certificate on your server - this will allow CloudFlare to communicate securely with your server as it attempts to cache your content.

Then when the user makes the request to CloudFlare, they return the content that they received over SSL, on an SSL connection. It's like magic.

CloudFlare just made a HGUE impact on the internet, IMO.

Re: Universal SSL

#8

Post by cube00 »

LordIllidan wrote: post #3

This is excellent news - one question though - what would a user on XP see when he accesses one of these sites?

If they are using Chrome they should be OK since that is still supported and is a "modern" browser, however IE under XP would show an error.

Re: Universal SSL

#9

Post by makomk »

spacefight wrote: post #2

Great initiative, minor drawbacks such as up to 20% of the traffic wouldn't apply due to their use of SNI: "Globally, more than 80% of requests come from modern browsers, and that percentage is growing quickly." EDIT: Mixed content on that page (within the embedded map at https://cloudflare.github.io/sni-visualization/ )

SNI isn't the only problem either. Apparently they're using ECDSA-based certificates which aren't generally used and aren't supported by older browsers.
Post reply on HN