11–20 of 66 posts
Are there more actual implementation details somewhere? Sounds like selecting the ssl context based on the clients SNI request. This (obviously) would predicate client SNI support, as opposed to anycast IPs or similar.
Update: I have another concern I just found out.
For example, I do a lot of web scraping through my domain and I see that I was automatically opted in to use https://www.cloudflare.com/apps/scrapeshield, something that is supposed to block scraping.
There's a huge conflict of interest if it turns out that the cloudflare network actively aims to help block scraping.
I know you guys said you will be on the neutral side but if the cloudflare is helping Scrapeshield become more intelligent about scraping by monitoring my scraping actions, I really don't know if it's wise to stay with cloudflare, as much as I love it.
Earlier quoted context omitted.
It's not a problem if those connections use self-signed certificates, right? If that's the case, then setting up SSL from CloudFlare to your servers should be pretty easy.
It would be free, but not necessarily easy, as it would still entail configuring your web server to use SSL, and that might not even be an option if you're using shared hosting. (Aside: self signed certs don't protect the connection from active attacks unless CloudFlare pins the cert. I'm mainly concerned with passive eavesdropping though.)
what I just paid 20/month for the SSL.... Update: I have another concern I just found out. For example, I do a lot of web scraping through my domain and I see that I was automatically opted in to use https://www.cloudflare.com/apps/scrapeshield , something that is supposed to block scraping. There's a huge conflict of interest if it turns out that the cloudflare network actively aims to help block scraping. I know yo…
Are EV certs going to remain Business/Enterprise-only?
what I just paid 20/month for the SSL.... Update: I have another concern I just found out. For example, I do a lot of web scraping through my domain and I see that I was automatically opted in to use https://www.cloudflare.com/apps/scrapeshield , something that is supposed to block scraping. There's a huge conflict of interest if it turns out that the cloudflare network actively aims to help block scraping. I know yo…
http://blog.cloudflare.com/introducing-scrapeshield-discover...
Please note that using Cloudflare, even with free SSL, is not an increase to the security and privacy of your users. On the contrary, Cloudflare records information about your users (this cannot be disabled) and, by default, blocks users who attempt to view your site through privacy-enhancing software. I would suggest that people looking to install SSL on their website (this should be everybody) instead get their fre…