Cloudflare enable SSL encryption for free - Page 1
Forum section: electronics / general

author: Legit-Design
author_rank: Frequent Contributor
timestamp: October 02, 2014, 08:37:27 pm
content: Dear Dave,Please enable this.http://arstechnica.com/information-technology/2014/09/cloudflare-gives-internet-a-present-free-no-hassle-universal-ssl/CloudFlare gives Internet a present: free, no-hassle “Universal” SSLEven free accounts will get elliptic curve encryption crypto protection.Better ranking, more business value for Dave:http://googlewebmastercentral.blogspot.fi/2014/08/https-as-ranking-signal.htmlhttps://blog.globalsignblog.com/blog/how-to-improve-your-seo-ranking-with-sslGoogle rewards SSL users"Over the past few months we've been running tests taking into account whether sites use secure, encrypted connections as a signal in our search-ranking algorithms. We've seen positive results, so we're starting to use HTTPS as a ranking signal."I'm not actually fan of cloudflare, since Dave enabled cloudflare the forum (site works fine as cached cloudflare site) being unavailable has gone up by at least order of magnitude, which is really annoying.I don't actually care about google ranking, but only the possible privacy enhancing feature is what is interesting. It's free, easy to setup and gives additional benefits. Like Dave has written this is his business so why not do everything to protect it. Okay, since it's cloudflare a US company they will probably give anything and everything to NSA/FBI/WHOCARES, but people are still spied on by other advisories who are not suppose to have the access they now have.People who don't want to browse HTTPS don't have to use it, so I don't think there are downsides to people who don't want to use it or are still surfing windows xp IE6/whatever.

author: miguelvp
author_rank: Super Contributor
timestamp: October 03, 2014, 02:41:16 am
content: I voted no because if it needs to be fixed it should be fixed a the legislative level.

author: David Hess
author_rank: Super Contributor
timestamp: October 03, 2014, 12:45:45 pm
content: Quote from: miguelvp on October 03, 2014, 02:41:16 amIf it was fixed at the legislative level, would you believe it?If the FBI and other agencies and branches of government had been forthcoming and above reproach about the whole situation, then that would be one thing. Since they have not been, one would have to believe that a legislative solution would correct that was well. So far legislative solutions have only created a false sense of security.Oddly enough the FBI or NSA correctly identified this trust problem years ago and argued that it would eventually result in ubiquitous encryption making law enforcement more difficult but they only have themselves to blame for not correcting it when they could.

author: miguelvp
author_rank: Super Contributor
timestamp: October 03, 2014, 02:15:12 pm
content: Is not a matter of believe to me, If they want to break the law then they have to be ready to pay the consequences of getting caught. But for that there has to be a law to begin with.

author: ctz
author_rank: Contributor
timestamp: October 03, 2014, 07:40:02 pm
content: This is actually already enabled, see:https://www.eevblog.com/forum/suggestions/cloudflare-enable-ssl-encryption-for-free/?topicseenUnfortunately the pages are mostly broken because they don't use protocol-relative URLs (like //www.eevblog.com/thing instead ofhttp://www.eevblog.com/thing)

author: Legit-Design
author_rank: Frequent Contributor
timestamp: October 04, 2014, 05:36:08 am
content: Okay, so this needs to be (probably) changed at SMF level and then HTTPS everywhere plugin should automatically switch to HTTPS where available? I don't think it will happen anytime soon.

author: Kjelt
author_rank: Super Contributor
timestamp: October 29, 2014, 10:54:49 am
content: Why not do it the right way and get a certificate from a trusted third party instead of some company doing something proprietary or what am I missing here?

author: baljemmett
author_rank: Unknown
timestamp: October 30, 2014, 01:01:24 am
content: Quote from: Kjelt on October 29, 2014, 10:54:49 amCloudfare is effectively a honking great reverse proxy, so the certificate you install on your own web server is pretty much irrelevant. What Cloudfare are saying, as I understand it, is that they'll now offer HTTPS on their outward-facing servers for free - which is entirely orthogonal to HTTPS configuration at the backend.(Also I don't imagine for a moment they ask you to provide your own (single) certificate+private key for their frontends to use; that would seem rather dodgy, not to mention an administrative hassle.)

author: Richard Crowley
author_rank: Super Contributor
timestamp: October 30, 2014, 01:11:52 am
content: I voted NO because we are having enough problems with the way things are currently configured.We don't need to throw in ANOTHER variable of unknown consequences until the current config is more stable.