Live data from Hacker News

CloudFlare enabling free SSL by mid-October

blog.cloudflare.com

61–66 of 66 posts

Re: CloudFlare enabling free SSL by mid-October

#61
post #35

Earlier quoted context omitted.

So, you're saying that using HTTP instead of HTTPS doesn't increase the privacy of users? I'd say that it does "increase" the privacy, although nobody is saying that it fixes every hole in the boat...

Speaking strictly, you're right, but when you consider (a) Cloudflare's connection to your server is insecure (b) Cloudflare is listening in on every request (c) Cloudflare blocks VPN and Tor users, it doesn't seem like such an obvious decision. But that's a false dichotomy, since everybody should use HTTPS, nobody should use HTTP, and, most importantly, nobody should be okay with third-parties snooping on your users…

I had the same initial thought about (a), but the comments mentioned that CloudFlare issues a certificate you can install on your origin servers which will allow secure connections with CloudFlare.

Re: CloudFlare enabling free SSL by mid-October

#62
post #26

Earlier quoted context omitted.

just checked now, Gandi is 40€/yr, not that expensive compared to big names like Verisign & co. I have used in the past RapidSSL, but it is same price, 50$/yr. I've just checked Namecheap and it's reselling other SSL like Comodo or Geotrust, but it looks less expensive, so yes, probably it's the best price.

At Gandi, a single-address standard SSL cert is $16/12€ per year. The $50/40€ applies to multi-address certs (3 addresses) The full SSL price list is here: https://www.gandi.net/ssl/grid

you are right, I read the wrong line!

Re: CloudFlare enabling free SSL by mid-October

#66

Earlier quoted context omitted.

I would have guessed EV certs to remain business only. Well, perhaps not business only, but still requiring additional validation. How do you believe EV will be handled? Thanks! EDIT: I didn't realize you represented cloud-flare. I'm genuinely curious how EV certs will work. Thanks!

You'll have to supply your own EV cert, but you'll be able to use custom certs (EV or otherwise) at the Pro ($20/mo) level.

Thank you!
Post reply on HN