First letter of each paragraph = "SSL TLS FREE".
How on Earth do people spot things like this? <_<
[deleted]
Celebrating CloudFlare's 4th Birthday
21–30 of 42 posts
Re: Celebrating CloudFlare's 4th Birthday
#22It's also Google's birthday today.
I think they celebrate on 1st April.
Re: Celebrating CloudFlare's 4th Birthday
#23Wonder why DDOSes have been getting worse lately? DDOS groups are putting their sites behind Cloudflare so they cannot be DDOSed off the internet by rival groups, thus their "services" become a lot more accessible, and they have grown bolder. This is a grave conflict of interest for Cloudflare, they have no incentive to stop them, after all, it generates more business for Cloudflare. This absolutely needs to be addre…
It is because many DDoS websites sitting behind Cloudflare are FBI run. See titaniumstresser[0] as an example. One of their sub-domain's IP address is allocated to the FBI[1]. Seems like the longest lasting sites peddling stolen info, child pornography, or malicious services are all run by feds. Hostname: direct.titaniumstresser.net IP Address: 153.31.25.12 Organization: FBI Criminal Justice Information Systems [0] h…
That's not how you think it works. You can point domains you own at any IP you like.
Re: Celebrating CloudFlare's 4th Birthday
#24Re: Celebrating CloudFlare's 4th Birthday
#25Going to be interesting how they've solved this - my guess is an intermediary cert they've obtained. Must be pretty recent though, as it's not in my intermediary database[0].
GlobalSign also has an unlimited SSL cert offering, but it doesn't come with SANs (they could have arranged something though).
Re: Celebrating CloudFlare's 4th Birthday
#26Earlier quoted context omitted.
Time to go grab a cert from startssl.com for free. No more excuses for not having an SSL site.
CloudFlare will probably supply their own certificates so you won't even need to do that.
Even better! One-click cert gen and installation would be magical!
StartSSL is nice because you don't need create a csr. But Cloudflare could make it simpler still, since you've already got domain-level verification through them implicitly. And if you need a better trust chain for your certs, then you can provide your own.
This just got even more exciting!
Re: Celebrating CloudFlare's 4th Birthday
#27Going to be interesting how they've solved this - my guess is an intermediary cert they've obtained. Must be pretty recent though, as it's not in my intermediary database[0]. GlobalSign also has an unlimited SSL cert offering, but it doesn't come with SANs (they could have arranged something though). 0: https://github.com/iangcarroll/ca-intermediaries
They could be partnering with a root or intermediate CA for generation. But I don't see why they wouldn't get their own intermediate CA cert.
Re: Celebrating CloudFlare's 4th Birthday
#28Going to be interesting how they've solved this - my guess is an intermediary cert they've obtained. Must be pretty recent though, as it's not in my intermediary database[0]. GlobalSign also has an unlimited SSL cert offering, but it doesn't come with SANs (they could have arranged something though). 0: https://github.com/iangcarroll/ca-intermediaries
They offers SSL with CloudFlare-issued cert for non-free plan already. I assume they use the old method of obtaining cert. Also, I think at their scale they can get special plan from CA.
Re: Celebrating CloudFlare's 4th Birthday
#29Going to be interesting how they've solved this - my guess is an intermediary cert they've obtained. Must be pretty recent though, as it's not in my intermediary database[0]. GlobalSign also has an unlimited SSL cert offering, but it doesn't come with SANs (they could have arranged something though). 0: https://github.com/iangcarroll/ca-intermediaries
They offers SSL with CloudFlare-issued cert for non-free plan already. I assume they use the old method of obtaining cert. Also, I think at their scale they can get special plan from CA.
They pay GlobalSign roughly $4000 (most are 3 yrs in length, that's for all three), which is only used to power SSL for about twenty domains (this obviously varies but it's what I've seen before, and it should be able to support 50 or 100 total domains).
Free SSL would not be practical with their old method.
Re: Celebrating CloudFlare's 4th Birthday
#30Going to be interesting how they've solved this - my guess is an intermediary cert they've obtained. Must be pretty recent though, as it's not in my intermediary database[0]. GlobalSign also has an unlimited SSL cert offering, but it doesn't come with SANs (they could have arranged something though). 0: https://github.com/iangcarroll/ca-intermediaries
They could be partnering with a root or intermediate CA for generation. But I don't see why they wouldn't get their own intermediate CA cert.
If they created their own root instead of partnering with another CA, which is what I assume you meant, then they would need a lot of time (2 yrs just to be included in apple+msft+mozilla) and the process would be public.
An intermediary created by a partner would solve the problem but would require a partnership.